CVE-2026-72120 (GCVE-0-2026-72120)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:52 – Updated: 2026-08-17 05:40
VLAI
Title
can: bcm: add missing rcu list annotations and operations
Summary
In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and operations sashiko-bot remarked the missing use of list_add_rcu() in bcm_[rx|tx]_setup() to have a proper initialized bcm_op structure when bcm_proc_show() traverses the bcm_op's under rcu_read_lock(). To cover all initial settings of the bcm_op's the list_add_rcu() calls are moved to the end of the setup code. While at it, also fix the mirroring removal side: bcm_release() called bcm_remove_op() - which frees the op via call_rcu() - on ops that were still linked in bo->tx_ops/bo->rx_ops, without list_del_rcu() first. Unlink each op with list_del_rcu() before handing it to bcm_remove_op(), matching the existing pattern in bcm_delete_tx_op()/bcm_delete_rx_op().
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 659701c0b954ccdb4a916a4ad59bbc16e726d42c , < 8357255e56dc1aaa437e3c53ee9385de984e0d57 (git)
Affected: 0622846db728a5332b917c797c733e202c4620ae , < 8e1c7257c81577130f5ce90f69b2a2c3ce63f957 (git)
Affected: 6d7d458c41b98a5c1670cbd36f2923c37de51cf5 , < eb1c26eab4d1f0b4450439b4b88c3e73faf1da98 (git)
Affected: 1f912f8484e9c4396378c39460bbea0af681f319 , < f53bdab85e64eb57d6899a30d1307fd5a3639cc7 (git)
Affected: 63567ecd99a24495208dc860d50fb17440043006 , < 4e22e8b505f877573bbdfdbcb680babad9b2f7a1 (git)
Affected: dac5e6249159ac255dad9781793dbe5908ac9ddb , < b06a4a397ac826603f39875cb7c7819a41365196 (git)
Affected: dac5e6249159ac255dad9781793dbe5908ac9ddb , < 30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d (git)
Affected: dac5e6249159ac255dad9781793dbe5908ac9ddb , < 7b2c3eabc4dafc062a25e10711154f2107526a78 (git)
Affected: 19f553a1ddf260da6570ed8f8d91a8c87f49b63a (git)
Affected: 7c9db92d5f0eadca30884af75c53d601edc512ee (git)
Affected: 5.10.238 , < 5.10.261 (semver)
Affected: 5.15.185 , < 5.15.212 (semver)
Affected: 6.1.141 , < 6.1.178 (semver)
Affected: 6.6.93 , < 6.6.145 (semver)
Affected: 6.12.31 , < 6.12.97 (semver)
Affected: 5.4.294 , < 5.5 (semver)
Affected: 6.14.9 , < 6.15 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.15
Unaffected: 0 , < 6.15 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/can/bcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8357255e56dc1aaa437e3c53ee9385de984e0d57",
              "status": "affected",
              "version": "659701c0b954ccdb4a916a4ad59bbc16e726d42c",
              "versionType": "git"
            },
            {
              "lessThan": "8e1c7257c81577130f5ce90f69b2a2c3ce63f957",
              "status": "affected",
              "version": "0622846db728a5332b917c797c733e202c4620ae",
              "versionType": "git"
            },
            {
              "lessThan": "eb1c26eab4d1f0b4450439b4b88c3e73faf1da98",
              "status": "affected",
              "version": "6d7d458c41b98a5c1670cbd36f2923c37de51cf5",
              "versionType": "git"
            },
            {
              "lessThan": "f53bdab85e64eb57d6899a30d1307fd5a3639cc7",
              "status": "affected",
              "version": "1f912f8484e9c4396378c39460bbea0af681f319",
              "versionType": "git"
            },
            {
              "lessThan": "4e22e8b505f877573bbdfdbcb680babad9b2f7a1",
              "status": "affected",
              "version": "63567ecd99a24495208dc860d50fb17440043006",
              "versionType": "git"
            },
            {
              "lessThan": "b06a4a397ac826603f39875cb7c7819a41365196",
              "status": "affected",
              "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
              "versionType": "git"
            },
            {
              "lessThan": "30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d",
              "status": "affected",
              "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
              "versionType": "git"
            },
            {
              "lessThan": "7b2c3eabc4dafc062a25e10711154f2107526a78",
              "status": "affected",
              "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "19f553a1ddf260da6570ed8f8d91a8c87f49b63a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7c9db92d5f0eadca30884af75c53d601edc512ee",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.261",
              "status": "affected",
              "version": "5.10.238",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.212",
              "status": "affected",
              "version": "5.15.185",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.178",
              "status": "affected",
              "version": "6.1.141",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.145",
              "status": "affected",
              "version": "6.6.93",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.97",
              "status": "affected",
              "version": "6.12.31",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.294",
              "versionType": "semver"
            },
            {
              "lessThan": "6.15",
              "status": "affected",
              "version": "6.14.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/can/bcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.15"
            },
            {
              "lessThan": "6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "5.10.238",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "5.15.185",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "6.1.141",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "6.6.93",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "6.12.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.294",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.14.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: add missing rcu list annotations and operations\n\nsashiko-bot remarked the missing use of list_add_rcu() in\nbcm_[rx|tx]_setup() to have a proper initialized bcm_op structure\nwhen bcm_proc_show() traverses the bcm_op\u0027s under rcu_read_lock().\n\nTo cover all initial settings of the bcm_op\u0027s the list_add_rcu() calls\nare moved to the end of the setup code.\n\nWhile at it, also fix the mirroring removal side: bcm_release() called\nbcm_remove_op() - which frees the op via call_rcu() - on ops that were\nstill linked in bo-\u003etx_ops/bo-\u003erx_ops, without list_del_rcu() first.\nUnlink each op with list_del_rcu() before handing it to bcm_remove_op(),\nmatching the existing pattern in bcm_delete_tx_op()/bcm_delete_rx_op()."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires local syscalls (socket/connect/sendmsg/close on PF_CAN/CAN_BCM) and/or reading /proc/net/can-bcm/\u003cinode\u003e; the bug is in RCU list management and procfs traversal, not in remote CAN frame reception.\nAC:L - The attacker controls both sides of the race\u2014concurrent TX_SETUP/RX_SETUP or socket close while repeatedly reading the world-readable proc entry\u2014so the UAF in bcm_proc_show is reliably triggerable without external timing luck.\nPR:L - PF_CAN CAN_BCM sockets are created and connected without capability checks; RX_SETUP works with ifindex 0 (no bound CAN device), so any unprivileged local user can create ops and race procfs reads on automotive, industrial, and embedded systems with CONFIG_CAN_BCM.\nUI:N - No victim interaction is required; the attacker drives the full exploit sequence (socket setup, opcode installation, proc reads, and socket teardown) from their own local process threads.\nS:U - The use-after-free corrupts kernel heap memory within the same kernel security domain; impact is local privilege escalation or crash, not crossing a VM, container, or IOMMU security boundary.\nC:H - bcm_proc_show dereferences bcm_op fields (can_id, flags, timers, counters) from list entries that may already be freed via call_rcu in bcm_remove_op, enabling kernel heap memory disclosure and further exploitation primitives.\nI:H - Freed bcm_op structures are kmalloc heap objects containing list_head links, sock pointers, and hrtimer state; UAF combined with heap spraying can yield arbitrary kernel writes and control-flow hijack for privilege escalation.\nA:H - Concurrent procfs traversal of tx_ops/rx_ops lists containing stale pointers to RCU-freed bcm_op objects can cause kernel oops/panic during list walking or field access, and UAF exploitation attempts can also crash the system."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:40:33.370Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8357255e56dc1aaa437e3c53ee9385de984e0d57"
        },
        {
          "url": "https://git.kernel.org/stable/c/8e1c7257c81577130f5ce90f69b2a2c3ce63f957"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb1c26eab4d1f0b4450439b4b88c3e73faf1da98"
        },
        {
          "url": "https://git.kernel.org/stable/c/f53bdab85e64eb57d6899a30d1307fd5a3639cc7"
        },
        {
          "url": "https://git.kernel.org/stable/c/4e22e8b505f877573bbdfdbcb680babad9b2f7a1"
        },
        {
          "url": "https://git.kernel.org/stable/c/b06a4a397ac826603f39875cb7c7819a41365196"
        },
        {
          "url": "https://git.kernel.org/stable/c/30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d"
        },
        {
          "url": "https://git.kernel.org/stable/c/7b2c3eabc4dafc062a25e10711154f2107526a78"
        }
      ],
      "title": "can: bcm: add missing rcu list annotations and operations",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72120",
    "datePublished": "2026-08-15T05:52:59.226Z",
    "dateReserved": "2026-08-09T03:40:39.907Z",
    "dateUpdated": "2026-08-17T05:40:33.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-72120",
      "date": "2026-09-21",
      "epss": "0.00169",
      "percentile": "0.06596"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/can/bcm.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "8357255e56dc1aaa437e3c53ee9385de984e0d57",
                    "status": "affected",
                    "version": "659701c0b954ccdb4a916a4ad59bbc16e726d42c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8e1c7257c81577130f5ce90f69b2a2c3ce63f957",
                    "status": "affected",
                    "version": "0622846db728a5332b917c797c733e202c4620ae",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "eb1c26eab4d1f0b4450439b4b88c3e73faf1da98",
                    "status": "affected",
                    "version": "6d7d458c41b98a5c1670cbd36f2923c37de51cf5",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f53bdab85e64eb57d6899a30d1307fd5a3639cc7",
                    "status": "affected",
                    "version": "1f912f8484e9c4396378c39460bbea0af681f319",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4e22e8b505f877573bbdfdbcb680babad9b2f7a1",
                    "status": "affected",
                    "version": "63567ecd99a24495208dc860d50fb17440043006",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "b06a4a397ac826603f39875cb7c7819a41365196",
                    "status": "affected",
                    "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d",
                    "status": "affected",
                    "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "7b2c3eabc4dafc062a25e10711154f2107526a78",
                    "status": "affected",
                    "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "19f553a1ddf260da6570ed8f8d91a8c87f49b63a",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "7c9db92d5f0eadca30884af75c53d601edc512ee",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5.10.261",
                    "status": "affected",
                    "version": "5.10.238",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.15.212",
                    "status": "affected",
                    "version": "5.15.185",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.1.178",
                    "status": "affected",
                    "version": "6.1.141",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.6.145",
                    "status": "affected",
                    "version": "6.6.93",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.12.97",
                    "status": "affected",
                    "version": "6.12.31",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.5",
                    "status": "affected",
                    "version": "5.4.294",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.15",
                    "status": "affected",
                    "version": "6.14.9",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/can/bcm.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.15"
                  },
                  {
                    "lessThan": "6.15",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.261",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.212",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.178",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.145",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.97",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.40",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: add missing rcu list annotations and operations\n\nsashiko-bot remarked the missing use of list_add_rcu() in\nbcm_[rx|tx]_setup() to have a proper initialized bcm_op structure\nwhen bcm_proc_show() traverses the bcm_op\u0027s under rcu_read_lock().\n\nTo cover all initial settings of the bcm_op\u0027s the list_add_rcu() calls\nare moved to the end of the setup code.\n\nWhile at it, also fix the mirroring removal side: bcm_release() called\nbcm_remove_op() - which frees the op via call_rcu() - on ops that were\nstill linked in bo-\u003etx_ops/bo-\u003erx_ops, without list_del_rcu() first.\nUnlink each op with list_del_rcu() before handing it to bcm_remove_op(),\nmatching the existing pattern in bcm_delete_tx_op()/bcm_delete_rx_op()."
          }
        ],
        "id": "CVE-2026-72120",
        "lastModified": "2026-08-17T06:18:11.367",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T06:21:26.507",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/4e22e8b505f877573bbdfdbcb680babad9b2f7a1"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/7b2c3eabc4dafc062a25e10711154f2107526a78"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8357255e56dc1aaa437e3c53ee9385de984e0d57"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8e1c7257c81577130f5ce90f69b2a2c3ce63f957"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/b06a4a397ac826603f39875cb7c7819a41365196"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/eb1c26eab4d1f0b4450439b4b88c3e73faf1da98"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f53bdab85e64eb57d6899a30d1307fd5a3639cc7"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-17T22:51:08+00:00",
      "cve": "CVE-2026-72120",
      "id": "CVE-2026-72120",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "14",
      "product_status:known_not_affected": "260",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: can: bcm: add missing rcu list annotations and operations",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72120.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T13:30:50Z",
      "cve": "CVE-2026-72120",
      "id": "CVE-2026-72120",
      "initial_release_date": "2026-08-31T13:30:50Z",
      "product_status:known_affected": "268",
      "product_status:known_not_affected": "94",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-72120",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-72120.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.