CVE-2023-54039

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access In the j1939_tp_tx_dat_new() function, an out-of-bounds memory access could occur during the memcpy() operation if the size of skb->cb is larger than the size of struct j1939_sk_buff_cb. This is because the memcpy() operation uses the size of skb->cb, leading to a read beyond the struct j1939_sk_buff_cb. Updated the memcpy() operation to use the size of struct j1939_sk_buff_cb instead of the size of skb->cb. This ensures that the memcpy() operation only reads the memory within the bounds of struct j1939_sk_buff_cb, preventing out-of-bounds memory access. Additionally, add a BUILD_BUG_ON() to check that the size of skb->cb is greater than or equal to the size of struct j1939_sk_buff_cb. This ensures that the skb->cb buffer is large enough to hold the j1939_sk_buff_cb structure. [mkl: rephrase commit message]

SeverityUnknown
CVSS—
Exploit probability9. percentile0.2%
ProductLinux
PublishedDec 24, 2025
First seenDec 24, 2025

How to fix

Update
  • Linux Linuxd2136f05690c272dfc9f9d6efcc51d5f53494b33, 70caa596d158a5d84b117f722d58f3ea503a5ba9, 4fe1d9b6231a68ffc91318f57fd8e4982f028cf7, 4c3fb22a6ec68258ee129a2e6b720f43dffc562f, 36befc9aed6202b4a9b906529aea13eacd7e34ff, b45193cb4df556fe6251b285a5ce44046dd36b4a or later

Affected products

ProductAffected versionsFixed in
Linux Linux9d71dd0c70099914fcd063135da3c580865e924c ≤ v < d2136f05690c272dfc9f9d6efcc51d5f53494b33, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < 70caa596d158a5d84b117f722d58f3ea503a5ba9, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < 4fe1d9b6231a68ffc91318f57fd8e4982f028cf7, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < 4c3fb22a6ec68258ee129a2e6b720f43dffc562f, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < 36befc9aed6202b4a9b906529aea13eacd7e34ff, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < b45193cb4df556fe6251b285a5ce44046dd36b4a, 5.4d2136f05690c272dfc9f9d6efcc51d5f53494b33, 70caa596d158a5d84b117f722d58f3ea503a5ba9, 4fe1d9b6231a68ffc91318f57fd8e4982f028cf7, 4c3fb22a6ec68258ee129a2e6b720f43dffc562f, 36befc9aed6202b4a9b906529aea13eacd7e34ff, b45193cb4df556fe6251b285a5ce44046dd36b4a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.