CVE-2026-72119 (GCVE-0-2026-72119)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:52 – Updated: 2026-08-19 16:36
VLAI
Title
can: bcm: extend bcm_tx_lock usage for data and timer updates
Summary
In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm_tx_lock usage for data and timer updates Stage new CAN frame content for an existing tx op into a kmalloc()'d buffer and validate it there, mirroring the approach already used in bcm_rx_setup(). Only copy the validated data into op->frames while holding op->bcm_tx_lock, so bcm_can_tx() and bcm_tx_timeout_handler() can no longer observe a partially updated or unvalidated frame. Add a missing error path for memcpy_from_msg() when copying CAN frame data from userspace. Also move the kt_ival1/kt_ival2/ival1/ival2 updates in bcm_tx_setup() under op->bcm_tx_lock, and read kt_ival1/kt_ival2/count under the same lock in bcm_tx_set_expiry() and bcm_tx_timeout_handler(), closing the torn 64-bit ktime_t read on 32-bit platforms.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 7595de7bc56e0e52b74e56c90f7e247bf626d628 , < a538b072ee074c9b41b9d9c15a6861a963e30755 (git)
Affected: fbd8fdc2b218e979cfe422b139b8f74c12419d1f , < 63422347b4c782f429748b2a09cd3cf3b77e6abd (git)
Affected: 2a437b86ac5a9893c902f30ef66815bf13587bf6 , < 37917e432e50b7de2b64230974380132a30f7270 (git)
Affected: 76c84c3728178b2d38d5604e399dfe8b0752645e , < 52f06e7603780de100233713ddaf971d422e10ef (git)
Affected: cc55dd28c20a6611e30596019b3b2f636819a4c0 , < 972fd66bb08fdef1090abe43196ca8da07216d13 (git)
Affected: c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7 , < bd46f55dec608daa44b45dcf3328517630ad8e40 (git)
Affected: c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7 , < 337f966c00662d81ad82cf5a4bbb150b2e32c0d4 (git)
Affected: c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7 , < 12ce799f7ab1e05bd8fbf79e46f403bfe5597ebc (git)
Affected: 8f1c022541bf5a923c8d6fa483112c15250f30a4 (git)
Affected: c4e8a172501e677ebd8ea9d9161d97dc4df56fbd (git)
Affected: 5.10.238 , < 5.10.265 (semver)
Affected: 5.15.185 , < 5.15.216 (semver)
Affected: 6.1.141 , < 6.1.183 (semver)
Affected: 6.6.93 , < 6.6.148 (semver)
Affected: 6.12.31 , < 6.12.101 (semver)
Affected: 5.4.294 , < 5.5 (semver)
Affected: 6.14.9 , < 6.15 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.15
Unaffected: 0 , < 6.15 (semver)
Unaffected: 5.10.265 , ≤ 5.10.* (semver)
Unaffected: 5.15.216 , ≤ 5.15.* (semver)
Unaffected: 6.1.183 , ≤ 6.1.* (semver)
Unaffected: 6.6.148 , ≤ 6.6.* (semver)
Unaffected: 6.12.101 , ≤ 6.12.* (semver)
Unaffected: 6.18.42 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/can/bcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a538b072ee074c9b41b9d9c15a6861a963e30755",
              "status": "affected",
              "version": "7595de7bc56e0e52b74e56c90f7e247bf626d628",
              "versionType": "git"
            },
            {
              "lessThan": "63422347b4c782f429748b2a09cd3cf3b77e6abd",
              "status": "affected",
              "version": "fbd8fdc2b218e979cfe422b139b8f74c12419d1f",
              "versionType": "git"
            },
            {
              "lessThan": "37917e432e50b7de2b64230974380132a30f7270",
              "status": "affected",
              "version": "2a437b86ac5a9893c902f30ef66815bf13587bf6",
              "versionType": "git"
            },
            {
              "lessThan": "52f06e7603780de100233713ddaf971d422e10ef",
              "status": "affected",
              "version": "76c84c3728178b2d38d5604e399dfe8b0752645e",
              "versionType": "git"
            },
            {
              "lessThan": "972fd66bb08fdef1090abe43196ca8da07216d13",
              "status": "affected",
              "version": "cc55dd28c20a6611e30596019b3b2f636819a4c0",
              "versionType": "git"
            },
            {
              "lessThan": "bd46f55dec608daa44b45dcf3328517630ad8e40",
              "status": "affected",
              "version": "c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7",
              "versionType": "git"
            },
            {
              "lessThan": "337f966c00662d81ad82cf5a4bbb150b2e32c0d4",
              "status": "affected",
              "version": "c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7",
              "versionType": "git"
            },
            {
              "lessThan": "12ce799f7ab1e05bd8fbf79e46f403bfe5597ebc",
              "status": "affected",
              "version": "c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8f1c022541bf5a923c8d6fa483112c15250f30a4",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c4e8a172501e677ebd8ea9d9161d97dc4df56fbd",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.265",
              "status": "affected",
              "version": "5.10.238",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.216",
              "status": "affected",
              "version": "5.15.185",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.183",
              "status": "affected",
              "version": "6.1.141",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.148",
              "status": "affected",
              "version": "6.6.93",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.101",
              "status": "affected",
              "version": "6.12.31",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.294",
              "versionType": "semver"
            },
            {
              "lessThan": "6.15",
              "status": "affected",
              "version": "6.14.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/can/bcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.15"
            },
            {
              "lessThan": "6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.101",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "5.10.238",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "5.15.185",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "6.1.141",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.148",
                  "versionStartIncluding": "6.6.93",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.101",
                  "versionStartIncluding": "6.12.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.42",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.294",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.14.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: extend bcm_tx_lock usage for data and timer updates\n\nStage new CAN frame content for an existing tx op into a kmalloc()\u0027d\nbuffer and validate it there, mirroring the approach already used in\nbcm_rx_setup(). Only copy the validated data into op-\u003eframes while\nholding op-\u003ebcm_tx_lock, so bcm_can_tx() and bcm_tx_timeout_handler()\ncan no longer observe a partially updated or unvalidated frame.\n\nAdd a missing error path for memcpy_from_msg() when copying CAN frame\ndata from userspace.\n\nAlso move the kt_ival1/kt_ival2/ival1/ival2 updates in bcm_tx_setup()\nunder op-\u003ebcm_tx_lock, and read kt_ival1/kt_ival2/count under the same\nlock in bcm_tx_set_expiry() and bcm_tx_timeout_handler(), closing the\ntorn 64-bit ktime_t read on 32-bit platforms."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached only through PF_CAN/CAN_BCM socket sendmsg() TX_SETUP updates racing hrtimer-driven bcm_can_tx(); it is not triggered by remote network services or CAN bus traffic alone.\nAC:L - The attacker controls both sides of the race by creating cyclic TX ops with STARTTIMER/SETTIMER and repeatedly issuing TX_SETUP while the softirq hrtimer fires, making the window reliably winnable without external timing luck.\nPR:L - bcm_sendmsg()/bcm_connect() enforce no capability checks; any local user with access to a CAN interface (including vcan created with CAP_NET_ADMIN inside an unprivileged user namespace) can open BCM sockets and drive TX_SETUP.\nUI:N - Exploitation requires only the attacker opening a BCM socket and sending TX_SETUP messages; no victim interaction such as mounting filesystems or opening files is needed.\nS:U - Impact is confined to kernel memory/state corruption and local privilege effects on the host running CAN BCM; it does not cross a VM, container, or IOMMU security boundary by itself.\nC:H - Racing updates can let bcm_can_tx() transmit partially updated or unvalidated frames (e.g., len\u003e64) before bcm_tx_setup() rejects them, and many CAN driver xmit paths memcpy(cf-\u003edata, cf-\u003elen) trusting len, causing kernel out-of-bounds reads.\nI:H - Concurrent unsynchronized writes to op-\u003eframes, flags, count, and ktime_t timer fields corrupt shared in-kernel BCM state that directly feeds skb construction and driver transmission, providing attacker-influenced memory corruption primitives.\nA:H - Observing torn/unvalidated frames in bcm_can_tx() during active timers can trigger kernel WARN/Oops/panic via out-of-bounds accesses in CAN drivers, and torn ktime_t/count reads can disrupt cyclic transmission causing denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:36:13.917Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a538b072ee074c9b41b9d9c15a6861a963e30755"
        },
        {
          "url": "https://git.kernel.org/stable/c/63422347b4c782f429748b2a09cd3cf3b77e6abd"
        },
        {
          "url": "https://git.kernel.org/stable/c/37917e432e50b7de2b64230974380132a30f7270"
        },
        {
          "url": "https://git.kernel.org/stable/c/52f06e7603780de100233713ddaf971d422e10ef"
        },
        {
          "url": "https://git.kernel.org/stable/c/972fd66bb08fdef1090abe43196ca8da07216d13"
        },
        {
          "url": "https://git.kernel.org/stable/c/bd46f55dec608daa44b45dcf3328517630ad8e40"
        },
        {
          "url": "https://git.kernel.org/stable/c/337f966c00662d81ad82cf5a4bbb150b2e32c0d4"
        },
        {
          "url": "https://git.kernel.org/stable/c/12ce799f7ab1e05bd8fbf79e46f403bfe5597ebc"
        }
      ],
      "title": "can: bcm: extend bcm_tx_lock usage for data and timer updates",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72119",
    "datePublished": "2026-08-15T05:52:58.479Z",
    "dateReserved": "2026-08-09T03:40:39.906Z",
    "dateUpdated": "2026-08-19T16:36:13.917Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-72119",
      "date": "2026-09-21",
      "epss": "0.00164",
      "percentile": "0.06046"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/can/bcm.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "a538b072ee074c9b41b9d9c15a6861a963e30755",
                    "status": "affected",
                    "version": "7595de7bc56e0e52b74e56c90f7e247bf626d628",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "63422347b4c782f429748b2a09cd3cf3b77e6abd",
                    "status": "affected",
                    "version": "fbd8fdc2b218e979cfe422b139b8f74c12419d1f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "37917e432e50b7de2b64230974380132a30f7270",
                    "status": "affected",
                    "version": "2a437b86ac5a9893c902f30ef66815bf13587bf6",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "52f06e7603780de100233713ddaf971d422e10ef",
                    "status": "affected",
                    "version": "76c84c3728178b2d38d5604e399dfe8b0752645e",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "972fd66bb08fdef1090abe43196ca8da07216d13",
                    "status": "affected",
                    "version": "cc55dd28c20a6611e30596019b3b2f636819a4c0",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "bd46f55dec608daa44b45dcf3328517630ad8e40",
                    "status": "affected",
                    "version": "c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "337f966c00662d81ad82cf5a4bbb150b2e32c0d4",
                    "status": "affected",
                    "version": "c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "12ce799f7ab1e05bd8fbf79e46f403bfe5597ebc",
                    "status": "affected",
                    "version": "c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "8f1c022541bf5a923c8d6fa483112c15250f30a4",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "c4e8a172501e677ebd8ea9d9161d97dc4df56fbd",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5.10.265",
                    "status": "affected",
                    "version": "5.10.238",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.15.216",
                    "status": "affected",
                    "version": "5.15.185",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.1.183",
                    "status": "affected",
                    "version": "6.1.141",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.6.148",
                    "status": "affected",
                    "version": "6.6.93",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.12.101",
                    "status": "affected",
                    "version": "6.12.31",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.5",
                    "status": "affected",
                    "version": "5.4.294",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.15",
                    "status": "affected",
                    "version": "6.14.9",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/can/bcm.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.15"
                  },
                  {
                    "lessThan": "6.15",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.265",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.216",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.183",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.148",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.101",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.42",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: extend bcm_tx_lock usage for data and timer updates\n\nStage new CAN frame content for an existing tx op into a kmalloc()\u0027d\nbuffer and validate it there, mirroring the approach already used in\nbcm_rx_setup(). Only copy the validated data into op-\u003eframes while\nholding op-\u003ebcm_tx_lock, so bcm_can_tx() and bcm_tx_timeout_handler()\ncan no longer observe a partially updated or unvalidated frame.\n\nAdd a missing error path for memcpy_from_msg() when copying CAN frame\ndata from userspace.\n\nAlso move the kt_ival1/kt_ival2/ival1/ival2 updates in bcm_tx_setup()\nunder op-\u003ebcm_tx_lock, and read kt_ival1/kt_ival2/count under the same\nlock in bcm_tx_set_expiry() and bcm_tx_timeout_handler(), closing the\ntorn 64-bit ktime_t read on 32-bit platforms."
          }
        ],
        "id": "CVE-2026-72119",
        "lastModified": "2026-08-19T17:20:58.903",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T06:21:26.363",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/12ce799f7ab1e05bd8fbf79e46f403bfe5597ebc"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/337f966c00662d81ad82cf5a4bbb150b2e32c0d4"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/37917e432e50b7de2b64230974380132a30f7270"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/52f06e7603780de100233713ddaf971d422e10ef"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/63422347b4c782f429748b2a09cd3cf3b77e6abd"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/972fd66bb08fdef1090abe43196ca8da07216d13"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/a538b072ee074c9b41b9d9c15a6861a963e30755"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/bd46f55dec608daa44b45dcf3328517630ad8e40"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-17T22:48:50+00:00",
      "cve": "CVE-2026-72119",
      "id": "CVE-2026-72119",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "62",
      "product_status:known_not_affected": "212",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: can: bcm: extend bcm_tx_lock usage for data and timer updates",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72119.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T01:29:25Z",
      "cve": "CVE-2026-72119",
      "id": "CVE-2026-72119",
      "initial_release_date": "2026-09-07T16:23:21Z",
      "product_status:known_affected": "179",
      "product_status:known_not_affected": "183",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-72119",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-72119.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.