https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 08:41:29 +0000 https://vulnerability.circl.lu/vuln/cve-2022-48977 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: af_can: fix NULL pointer dereference in can_rcv_filter</p> <p>Analogue to commit 8aa59e355949 (&#34;can: af_can: fix NULL pointer dereference in can_rx_register()&#34;) we need to check for a missing initialization of ml_priv in the receive path of CAN frames.</p> <p>Since commit 4e096a18867a (&#34;net: introduce CAN specific pointer in the struct net_device&#34;) the check for dev-&gt;type to be ARPHRD_CAN is not sufficient anymore since bonding or tun netdevices claim to be CAN devices but do not initialize ml_priv accordingly.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>can: af_can: fix NULL pointer dereference in can_rcv_filter</p> <p>Analogue to commit 8aa59e355949 (&#34;can: af_can: fix NULL pointer dereference in can_rx_register()&#34;) we need to check for a missing initialization of ml_priv in the receive path of CAN frames.</p> <p>Since commit 4e096a18867a (&#34;net: introduce CAN specific pointer in the struct net_device&#34;) the check for dev-&gt;type to be ARPHRD_CAN is not sufficient anymore since bonding or tun netdevices claim to be CAN devices but do not initialize ml_priv accordingly.</p> https://vulnerability.circl.lu/vuln/cve-2022-48977