https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:32:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-23298 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: ucan: Fix infinite loop from zero-length messages</p> <p>If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one.</p> <p>This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 (&#34;can: kvaser_usb: leaf: Fix potential infinite loop in command parsers&#34;), so there must be some broken devices out there like this somewhere.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: ucan: Fix infinite loop from zero-length messages</p> <p>If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one.</p> <p>This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 (&#34;can: kvaser_usb: leaf: Fix potential infinite loop in command parsers&#34;), so there must be some broken devices out there like this somewhere.</p> https://vulnerability.circl.lu/vuln/cve-2026-23298