https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 17:22:08 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74457 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: peak_usb: add bounds check for USB channel index</p> <p>The channel control index ctrl_idx is derived from rx-&gt;len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usb_if-&gt;dev[] is only 2. Values 2-15 cause heap out-of-bounds read, eventually causing kernel panic in the IRQ context.</p> <p>Add bounds checking for ctrl_idx before the array access in both pcan_usb_pro_handle_canmsg() and pcan_usb_pro_handle_error().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: peak_usb: add bounds check for USB channel index</p> <p>The channel control index ctrl_idx is derived from rx-&gt;len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usb_if-&gt;dev[] is only 2. Values 2-15 cause heap out-of-bounds read, eventually causing kernel panic in the IRQ context.</p> <p>Add bounds checking for ctrl_idx before the array access in both pcan_usb_pro_handle_canmsg() and pcan_usb_pro_handle_error().</p> https://vulnerability.circl.lu/vuln/cve-2026-74457