CVE-2022-48977
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
can: af_can: fix NULL pointer dereference in can_rcv_filter
In the Linux kernel, the following vulnerability has been resolved: can: af_can: fix NULL pointer dereference in can_rcv_filter Analogue to commit 8aa59e355949 ("can: af_can: fix NULL pointer dereference in can_rx_register()") we need to check for a missing initialization of ml_priv in the receive path of CAN frames. Since commit 4e096a18867a ("net: introduce CAN specific pointer in the struct net_device") the check for dev->type to be ARPHRD_CAN is not sufficient anymore since bonding or tun netdevices claim to be CAN devices but do not initialize ml_priv accordingly.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4ac1feff6ea6495cbfd336f4438a6c6d140544a6 | affected | git | 3982652957e8d79ac32efcb725450580650a8644 | Unavailable | None listed |
| 1a5751d58b14195f763b8c1d9ef33fb8a93e95e7 | affected | git | c42221efb1159d6a3c89e96685ee38acdce86b6f | Unavailable | None listed |
| 4e096a18867a5a989b510f6999d9c6b6622e8f7b | affected | git | c142cba37de29f740a3852f01f59876af8ae462a | Unavailable | None listed |
| 4e096a18867a5a989b510f6999d9c6b6622e8f7b | affected | git | fcc63f2f7ee3038d53216edd0d8291e57c752557 | Unavailable | None listed |
| 4e096a18867a5a989b510f6999d9c6b6622e8f7b | affected | git | 0acc442309a0a1b01bcdaa135e56e6398a49439c | Unavailable | None listed |
| 96340078d50a54f6a1252c62596bc44321c8bff9 | affected | git | Unavailable | Unavailable | None listed |
| 5.4.110 | affected | semver | 5.4.227 | Unavailable | None listed |
| 5.10.28 | affected | semver | 5.10.159 | Unavailable | None listed |
| 5.11.12 | affected | semver | 5.12 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.12 | Unavailable | None listed |
| 5.4.227 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.159 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.83 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.0.13 | unaffected | semver | Unavailable | 6.0.* | None listed |
| 6.1 | unaffected | original_commit_for_fix | Unavailable | * | None listed |