CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HIn the Linux kernel, the following vulnerability has been resolved: can: ems_usb: validate CPC message lengths ems_usb_read_bulk_callback() walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the fields used by the CAN, state, error and overrun handlers. A flaw was found in the Linux kernel's `ems_usb` module. This vulnerability occurs because the `ems_usb_read_bulk_callback()` function, which processes Controller Area Network (CAN) Protocol Converter (CPC) messages from a USB receive buffer, does not properly validate the lengths of these messages. An attacker could exploit this by sending specially crafted CPC messages, potentially leading to a denial of service due to a format error when processing the malformed data.
Multiple vulnerabilities have been discovered in the Linux kernel of Debian. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions are prior to 6.12.10…