A memory corruption vulnerability in the Linux kernel CAN driver could allow a local attacker to achieve elevated privileges or system compromise.

The vulnerability exists in the fw_parse function of the Softing CAN driver, which fails to properly validate firmware record spans and utilizes unsafe arithmetic for memory bounds checking. A local attacker with low privileges can exploit this to perform out-of-bounds reads and writes in kernel memory.

Successful exploitation allows an attacker to manipulate kernel-level operations, potentially leading to full system compromise, data theft, or a kernel panic causing denial of service. While the CVSS score of 7.8 indicates high severity, the requirement for local access somewhat restricts the attack surface to users already present on the system.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.151, or a later stable release provided by your distribution.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or segmentation faults that may indicate an exploitation attempt.

Compensating Controls: Restrict access to CAN bus hardware interfaces to only authorized system users and ensure that untrusted users cannot load kernel modules or interact with low-level driver interfaces.

Public Exploit Available: Unknown.

Given the potential for privilege escalation and kernel-level impact, organizations should prioritize patching the Linux kernel across all affected environments. Administrators should coordinate with their OS vendors to ensure these upstream fixes are integrated into their respective distribution kernels as soon as they become available.