can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
Summary
| CVE | CVE-2026-23155 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-02-14 16:15:55 UTC |
| Updated | 2026-04-18 09:16:14 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Sinc commit 79a6d1bfe114 ("can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error") a failing resubmit URB will print an info message. In the case of a short read where netdev has not yet been assigned, initialize as NULL to avoid dereferencing an undefined value. Also report the error value of the failed resubmit. |
Risk And Classification
Primary CVSS: v3.1 5.5 MEDIUM from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.000150000 probability, percentile 0.032510000 (date 2026-04-21)
Problem Types: CWE-476
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | 6.12.68 | All | All | All |
| Operating System | Linux | Linux Kernel | 6.18.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 6.19 | rc7 | All | All |
| Operating System | Linux | Linux Kernel | 6.6.122 | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected da01de754e455e2598a7f1ce4ff2078c4f0ecde1 7a431df418ee6b79841e0b4c7c265a791e3d0a75 git | Not specified |
| CNA | Linux | Linux | affected aa8a8866c533a150be4763bcb27993603bd5426c aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5 git | Not specified |
| CNA | Linux | Linux | affected ce4352057fc5a986c76ece90801b9755e7c6e56c 923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6 git | Not specified |
| CNA | Linux | Linux | affected c610b550ccc0438d456dfe1df9f4f36254ccaae3 8986cdf52f86208df9c7887fee23365b5d37da26 git | Not specified |
| CNA | Linux | Linux | affected c3edc14da81a8d8398682f6e4ab819f09f37c0b7 713ba826ae114ab339c9a1b31e209bebdadb0ac9 git | Not specified |
| CNA | Linux | Linux | affected 79a6d1bfe1148bc921b8d7f3371a7fbce44e30f7 494fc029f662c331e06b7c2031deff3c64200eed git | Not specified |
| CNA | Linux | Linux | affected 6.6.122 6.6.123 semver | Not specified |
| CNA | Linux | Linux | affected 6.12.68 6.12.69 semver | Not specified |
| CNA | Linux | Linux | affected 6.18.8 6.18.9 semver | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/8986cdf52f86208df9c7887fee23365b5d37da26 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/494fc029f662c331e06b7c2031deff3c64200eed | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/7a431df418ee6b79841e0b4c7c265a791e3d0a75 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/713ba826ae114ab339c9a1b31e209bebdadb0ac9 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.