Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

CVE-2023-52878: Linux kernel may crash due to CAN driver error

CVE-2023-52878 · published 2 years ago
Summary

The CAN network driver in certain Canonical Linux kernels can cause the entire system to stop working if it tries to read data beyond the allowed memory area. This would lead to an unexpected shutdown rather than a graceful warning. Updating to the latest kernel version provided by Canonical resolves the issue.

What to do
  • Update canonical linux-aws-5.15 to version 5.15.0-1056.61~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1058.66~20.04.2.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1053.61~20.04.1.
  • Update canonical linux-gkeop-5.15 to version 5.15.0-1038.44~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-100.110~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1048.51~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1050.56~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-100.110~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1025.25~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1053.59~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1051.55~20.04.1.
  • Update canonical linux to version 5.15.0-100.110.
  • Update canonical linux-aws to version 5.15.0-1056.61.
  • Update canonical linux-azure to version 5.15.0-1058.66.
  • Update canonical linux-azure-fde to version 5.15.0-1058.66.1.
  • Update canonical linux-gcp to version 5.15.0-1053.61.
  • Update canonical linux-gke to version 5.15.0-1052.57.
  • Update canonical linux-gkeop to version 5.15.0-1038.44.
  • Update canonical linux-ibm to version 5.15.0-1048.51.
  • Update canonical linux-intel-iotg to version 5.15.0-1050.56.
  • Update canonical linux-kvm to version 5.15.0-1052.57.
  • Update canonical linux-lowlatency to version 5.15.0-100.110.
  • Update canonical linux-nvidia to version 5.15.0-1046.46.
  • Update canonical linux-nvidia-6.5 to version 6.5.0-1014.14.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1025.25.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1012.12.
  • Update canonical linux-oracle to version 5.15.0-1053.59.
  • Update canonical linux-raspi to version 5.15.0-1048.51.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1030.34.
  • Update canonical linux-bluefield to version 5.15.0-1037.39.
  • Update canonical linux-aws-fips to version 5.15.0-1056.61+fips1.
  • Update canonical linux-fips to version 5.15.0-100.110+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1055.63+fips2.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1048.50.
  • Update canonical linux-realtime to version 5.15.0-1056.63.
  • Update debian rootio-linux to version 5.10.247-1.root.io.42.
  • Update debian linux to version 6.1.64-1.
  • Update debian linux to version 6.5.13-1.
  • Update linux kernel to version 6.6.2.
Affected software
Ecosystem VendorProductAffected versions
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:Pro:18.04:LTS canonical linux All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-kvm All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Showing 50 of 176. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1056.61~20.04.1
Fix: upgrade to 5.15.0-1056.61~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1058.66~20.04.2
Fix: upgrade to 5.15.0-1058.66~20.04.2
Ubuntu:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1053.61~20.04.1
Fix: upgrade to 5.15.0-1053.61~20.04.1
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 < 5.15.0-1038.44~20.04.1
Fix: upgrade to 5.15.0-1038.44~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-100.110~20.04.1
Fix: upgrade to 5.15.0-100.110~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1048.51~20.04.1
Fix: upgrade to 5.15.0-1048.51~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1050.56~20.04.1
Fix: upgrade to 5.15.0-1050.56~20.04.1
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-100.110~20.04.1
Fix: upgrade to 5.15.0-100.110~20.04.1
Ubuntu:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1025.25~20.04.1
Fix: upgrade to 5.15.0-1025.25~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1053.59~20.04.1
Fix: upgrade to 5.15.0-1053.59~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1051.55~20.04.1
Fix: upgrade to 5.15.0-1051.55~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-kvm All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-100.110
Fix: upgrade to 5.15.0-100.110
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1056.61
Fix: upgrade to 5.15.0-1056.61
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1058.66
Fix: upgrade to 5.15.0-1058.66
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1058.66.1
Fix: upgrade to 5.15.0-1058.66.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1053.61
Fix: upgrade to 5.15.0-1053.61
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1052.57
Fix: upgrade to 5.15.0-1052.57
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1038.44
Fix: upgrade to 5.15.0-1038.44
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1048.51
Fix: upgrade to 5.15.0-1048.51
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1050.56
Fix: upgrade to 5.15.0-1050.56
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1052.57
Fix: upgrade to 5.15.0-1052.57
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-100.110
Fix: upgrade to 5.15.0-100.110
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1046.46
Fix: upgrade to 5.15.0-1046.46
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 < 6.5.0-1014.14
Fix: upgrade to 6.5.0-1014.14
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1025.25
Fix: upgrade to 5.15.0-1025.25
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1012.12
Fix: upgrade to 5.15.0-1012.12
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1053.59
Fix: upgrade to 5.15.0-1053.59
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1048.51
Fix: upgrade to 5.15.0-1048.51
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1030.34
Fix: upgrade to 5.15.0-1030.34
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1037.39
Fix: upgrade to 5.15.0-1037.39
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1056.61+fips1
Fix: upgrade to 5.15.0-1056.61+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-100.110+fips1
Fix: upgrade to 5.15.0-100.110+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1055.63+fips2
Fix: upgrade to 5.15.0-1055.63+fips2
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1048.50
Fix: upgrade to 5.15.0-1048.50
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1056.63
Fix: upgrade to 5.15.0-1056.63
Ubuntu:24.04:LTS canonical linux-azure-fde All versions
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:26.04 canonical linux-nvidia All versions
Root:Debian:11 debian rootio-linux < 5.10.247-1.root.io.42
Fix: upgrade to 5.10.247-1.root.io.42
Debian:12 debian linux < 6.1.64-1
Fix: upgrade to 6.1.64-1
Debian:13 debian linux < 6.5.13-1
Fix: upgrade to 6.5.13-1
– linux linux_kernel >= 2.6.33, < 5.15.139
>= 5.16, < 6.1.63
>= 6.2, < 6.5.12
>= 6.6, < 6.6.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux linux kernel >= 6.6.0, < 6.6.2
Fix: upgrade to 6.6.2
Original advisory text
can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds If the "struct can_priv::echoo_skb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a meaningful warning message and return with an error.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published21 May 2024
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2023-52878 · NVD
Track software like this
Free during beta