CVE-2026-68387
Description
In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 ("can: raw: use bitfields to store flags in struct raw_sock") the formerly separate integer values have been integrated into a single bitfield. This led to a read-modify-write operation when changing a flag in raw_setsockopt() which now needs a locking to prevent concurrent access. Instead of adding a lock/unlock hell in each of the flag manipulations this patch introduces a wrapper for a new raw_setsockopt_locked() function analogue to the isotp_setsockopt[_locked]() approach in net/can/isotp.c [mkl: use Closes tag instead of Link]
How to fix
- Linux Linux00ba4bf8798242253fefc1fa6a78db1d445fd024, 57791aab1129c9405f84bb0882de58967d8b44cd, 1e5185c090589f4146d728ab36417d8a5419f127 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 890e5198a6e5b238627c245fafea1a92670a86cd ≤ v < 00ba4bf8798242253fefc1fa6a78db1d445fd024, 890e5198a6e5b238627c245fafea1a92670a86cd ≤ v < 57791aab1129c9405f84bb0882de58967d8b44cd, 890e5198a6e5b238627c245fafea1a92670a86cd ≤ v < 1e5185c090589f4146d728ab36417d8a5419f127, 6.18 | 00ba4bf8798242253fefc1fa6a78db1d445fd024, 57791aab1129c9405f84bb0882de58967d8b44cd, 1e5185c090589f4146d728ab36417d8a5419f127 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.