{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-49269","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2025-02-26T01:49:39.297Z","datePublished":"2025-02-26T01:56:17.204Z","dateUpdated":"2025-05-04T08:33:45.911Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2025-05-04T08:33:45.911Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ncan: isotp: sanitize CAN ID checks in isotp_bind()\n\nSyzbot created an environment that lead to a state machine status that\ncan not be reached with a compliant CAN ID address configuration.\nThe provided address information consisted of CAN ID 0x6000001 and 0xC28001\nwhich both boil down to 11 bit CAN IDs 0x001 in sending and receiving.\n\nSanitize the SFF/EFF CAN ID values before performing the address checks."}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/can/isotp.c"],"versions":[{"version":"e057dd3fc20ffb3d7f150af46542a51b59b90127","lessThan":"d72866a7f5326160d2a9d945a33eb6ef1883e25d","status":"affected","versionType":"git"},{"version":"e057dd3fc20ffb3d7f150af46542a51b59b90127","lessThan":"f343dbe82314ab457153c9afd970be4e9e553020","status":"affected","versionType":"git"},{"version":"e057dd3fc20ffb3d7f150af46542a51b59b90127","lessThan":"cf522d741f5301223cc94b978eb1603c7590d65e","status":"affected","versionType":"git"},{"version":"e057dd3fc20ffb3d7f150af46542a51b59b90127","lessThan":"7b4652fc71dcec043977a6def80ef5034c913615","status":"affected","versionType":"git"},{"version":"e057dd3fc20ffb3d7f150af46542a51b59b90127","lessThan":"3ea566422cbde9610c2734980d1286ab681bb40e","status":"affected","versionType":"git"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"affected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/can/isotp.c"],"versions":[{"version":"5.10","status":"affected"},{"version":"0","lessThan":"5.10","status":"unaffected","versionType":"semver"},{"version":"5.10.110","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.33","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"5.16.19","lessThanOrEqual":"5.16.*","status":"unaffected","versionType":"semver"},{"version":"5.17.2","lessThanOrEqual":"5.17.*","status":"unaffected","versionType":"semver"},{"version":"5.18","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"5.10.110"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"5.15.33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"5.16.19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"5.17.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"5.18"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/d72866a7f5326160d2a9d945a33eb6ef1883e25d"},{"url":"https://git.kernel.org/stable/c/f343dbe82314ab457153c9afd970be4e9e553020"},{"url":"https://git.kernel.org/stable/c/cf522d741f5301223cc94b978eb1603c7590d65e"},{"url":"https://git.kernel.org/stable/c/7b4652fc71dcec043977a6def80ef5034c913615"},{"url":"https://git.kernel.org/stable/c/3ea566422cbde9610c2734980d1286ab681bb40e"}],"title":"can: isotp: sanitize CAN ID checks in isotp_bind()","x_generator":{"engine":"bippy-1.2.0"}}}}