CVE-2026-74458
Description
In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A nonzero command shorter than CMD_HEADER_LEN can still be dispatched, and the wait path copies a matching command into a fixed caller-owned struct kvaser_cmd using the device-provided length. Reject nonzero commands that do not contain the fixed header or that extend beyond the current USB buffer item. In the wait path, also reject a matching command that exceeds the destination before copying it.
How to fix
- Linux Linuxc00ec53d7dec08134e97071850cc00ef000c5b77, d9e91672526ffa279709b15490118aea1bdee714, 72f96c2942f11a0ae8663adcb3d9ee986e07d4fa, 695aea154bb2d453e6daada1510972fafd075285, 3d0897ec623e422695d70d80ae456f89476c5328, 185cb1fa38142a3cbf223dd8b3abb24217f330d3, 21f0465fd86d77794aaed8e05f833634f68d178d, 0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 080f40a6fa28dab299da7a652e444b1e2d9231e7 ≤ v < c00ec53d7dec08134e97071850cc00ef000c5b77, 080f40a6fa28dab299da7a652e444b1e2d9231e7 ≤ v < d9e91672526ffa279709b15490118aea1bdee714, 080f40a6fa28dab299da7a652e444b1e2d9231e7 ≤ v < 72f96c2942f11a0ae8663adcb3d9ee986e07d4fa, 080f40a6fa28dab299da7a652e444b1e2d9231e7 ≤ v < 695aea154bb2d453e6daada1510972fafd075285, 080f40a6fa28dab299da7a652e444b1e2d9231e7 ≤ v < 3d0897ec623e422695d70d80ae456f89476c5328, 080f40a6fa28dab299da7a652e444b1e2d9231e7 ≤ v < 185cb1fa38142a3cbf223dd8b3abb24217f330d3, 080f40a6fa28dab299da7a652e444b1e2d9231e7 ≤ v < 21f0465fd86d77794aaed8e05f833634f68d178d, 080f40a6fa28dab299da7a652e444b1e2d9231e7 ≤ v < 0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee, 3.8 | c00ec53d7dec08134e97071850cc00ef000c5b77, d9e91672526ffa279709b15490118aea1bdee714, 72f96c2942f11a0ae8663adcb3d9ee986e07d4fa, 695aea154bb2d453e6daada1510972fafd075285, 3d0897ec623e422695d70d80ae456f89476c5328, 185cb1fa38142a3cbf223dd8b3abb24217f330d3, 21f0465fd86d77794aaed8e05f833634f68d178d, 0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.