CVE-2024-41088

When the mcp251xfdstartxmit() function fails, the driver stops processing messages, and the interrupt routine does not return, running indefinitely even after killing the running application.

Error messages: [ 441.298819] mcp251xfd spi2.0 can0: ERROR in mcp251xfdstartxmit: -16 [ 441.306498] mcp251xfd spi2.0 can0: Transmit Event FIFO buffer not empty. (seq=0x000017c7, teftail=0x000017cf, tefhead=0x000017d0, tx_head=0x000017d3). ... and repeat forever.

The issue can be triggered when multiple devices share the same SPI interface. And there is concurrent access to the bus.

The problem occurs because txring->head increments even if mcp251xfdstartxmit() fails. Consequently, the driver skips one TX package while still expecting a response in mcp251xfdhandletefifone().

Resolve the issue by starting a workqueue to write the tx obj synchronously if err = -EBUSY. In case of another error, decrement tx_ring->head, remove skb from the echo stack, and drop the message.

[mkl: use more imperative wording in patch description]

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

55e5b97f003e85e66babb55f357627d52081a264

Fixed

f926c022ebaabf7963bebf89a97201d66978a025

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

55e5b97f003e85e66babb55f357627d52081a264

Fixed

3e72558c1711d524e3150103739ddd06650e291b

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

55e5b97f003e85e66babb55f357627d52081a264

Fixed

6c6b4afa59c2fb4d1759235f866d8caed2aa4729

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

55e5b97f003e85e66babb55f357627d52081a264

Fixed

d8fb63e46c884c898a38f061c2330f7729e75510

Affected versions

v5.*

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.9

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.40

v6.1.41

v6.1.42

v6.1.43

v6.1.44

v6.1.45

v6.1.46

v6.1.47

v6.1.48

v6.1.49

v6.1.5

v6.1.50

v6.1.51

v6.1.52

v6.1.53

v6.1.54

v6.1.55

v6.1.56

v6.1.57

v6.1.58

v6.1.59

v6.1.6

v6.1.60

v6.1.61

v6.1.62

v6.1.63

v6.1.64

v6.1.65

v6.1.66

v6.1.67

v6.1.68

v6.1.69

v6.1.7

v6.1.70

v6.1.71

v6.1.72

v6.1.73

v6.1.74

v6.1.75

v6.1.76

v6.1.77

v6.1.78

v6.1.79

v6.1.8

v6.1.80

v6.1.81

v6.1.82

v6.1.83

v6.1.84

v6.1.85

v6.1.86

v6.1.87

v6.1.88

v6.1.89

v6.1.9

v6.1.90

v6.1.91

v6.1.92

v6.1.93

v6.1.94

v6.1.95

v6.1.96

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.4

v6.6.5

v6.6.6

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

v6.9.1

v6.9.2

v6.9.3

v6.9.4

v6.9.5

v6.9.6

v6.9.7

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8fb63e46c884c898a38f061c2330f7729e75510",
        "id": "CVE-2024-41088-0096471c",
        "target": {
            "function": "mcp251xfd_open",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "18689074015261410142861793674822854745",
            "length": 1219.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c6b4afa59c2fb4d1759235f866d8caed2aa4729",
        "id": "CVE-2024-41088-0ba0f856",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "197648682311536828386834263432770756324",
                "25845601783404051182447469942807963200",
                "278024461884638604419827086433185124408",
                "129749050648720035245481983624795749802",
                "101714125240763769276736198062055510405",
                "101357547443707927087161797263332370844",
                "15858746697893835161018281919539387695",
                "195091867306637976758329957531011019529",
                "15716026463803900330627165855493918968",
                "19955796583538618493125652790385145071",
                "76388229063706490305278773202940279015",
                "125908654647892566075813563307771454596",
                "270059537056652046507327984443202729373",
                "105105400024662164199397969252358709252",
                "229900331326684046347877827320955243227",
                "275090423381506063105360152220420581578"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e72558c1711d524e3150103739ddd06650e291b",
        "id": "CVE-2024-41088-21421ba4",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "285241193485979800084489886293616891704",
                "272430983808496939263883625655740420538",
                "249716946719441802657576625267662555792",
                "165710025763418222223630860950561099320",
                "141268220190281585347966334898465503740",
                "76062087259270941230683306177810291853"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c6b4afa59c2fb4d1759235f866d8caed2aa4729",
        "id": "CVE-2024-41088-2dde3276",
        "target": {
            "function": "mcp251xfd_open",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "18689074015261410142861793674822854745",
            "length": 1219.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c6b4afa59c2fb4d1759235f866d8caed2aa4729",
        "id": "CVE-2024-41088-50adcad5",
        "target": {
            "function": "mcp251xfd_start_xmit",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-tx.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "213121817809268727351890065969990283938",
            "length": 745.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e72558c1711d524e3150103739ddd06650e291b",
        "id": "CVE-2024-41088-6afff65a",
        "target": {
            "function": "mcp251xfd_open",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "18689074015261410142861793674822854745",
            "length": 1219.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c6b4afa59c2fb4d1759235f866d8caed2aa4729",
        "id": "CVE-2024-41088-6b17985e",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "285241193485979800084489886293616891704",
                "272430983808496939263883625655740420538",
                "249716946719441802657576625267662555792",
                "165710025763418222223630860950561099320",
                "141268220190281585347966334898465503740",
                "76062087259270941230683306177810291853"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e72558c1711d524e3150103739ddd06650e291b",
        "id": "CVE-2024-41088-6df91f8a",
        "target": {
            "function": "mcp251xfd_start_xmit",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-tx.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "213121817809268727351890065969990283938",
            "length": 745.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f926c022ebaabf7963bebf89a97201d66978a025",
        "id": "CVE-2024-41088-70c8552b",
        "target": {
            "function": "mcp251xfd_stop",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "137901733592837283551043546995812449161",
            "length": 474.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c6b4afa59c2fb4d1759235f866d8caed2aa4729",
        "id": "CVE-2024-41088-918a7a1c",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-tx.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "151201369741532948331907799151914981606",
                "269677415599025565744980620517182135542",
                "262461281105790762736965603308514806362",
                "192709765133574676070236947788285643832",
                "164149953940047070501529826818159773916",
                "283214861427068980052732126784482098966",
                "124388480069241006081841606370447839239",
                "184598766090512427760607322941917255267",
                "297523266493255491358361122983255029930",
                "316661238373268213275690498660039387683",
                "136658497432200876146240328443336263119",
                "35944883011114628655347985309381416450",
                "238496505570658316221639628756455289756",
                "30759389564152621580120474567362914281",
                "296913699239436971746160589889153997735",
                "322193411047204042420822206825977537588",
                "233227856985257488458400753227970435153"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f926c022ebaabf7963bebf89a97201d66978a025",
        "id": "CVE-2024-41088-94945f35",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "197648682311536828386834263432770756324",
                "25845601783404051182447469942807963200",
                "278024461884638604419827086433185124408",
                "129749050648720035245481983624795749802",
                "101714125240763769276736198062055510405",
                "101357547443707927087161797263332370844",
                "15858746697893835161018281919539387695",
                "195091867306637976758329957531011019529",
                "15716026463803900330627165855493918968",
                "19955796583538618493125652790385145071",
                "76388229063706490305278773202940279015",
                "125908654647892566075813563307771454596",
                "270059537056652046507327984443202729373",
                "105105400024662164199397969252358709252",
                "229900331326684046347877827320955243227",
                "275090423381506063105360152220420581578"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8fb63e46c884c898a38f061c2330f7729e75510",
        "id": "CVE-2024-41088-94a9ca31",
        "target": {
            "function": "mcp251xfd_stop",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "137901733592837283551043546995812449161",
            "length": 474.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f926c022ebaabf7963bebf89a97201d66978a025",
        "id": "CVE-2024-41088-af60f8f4",
        "target": {
            "function": "mcp251xfd_start_xmit",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-tx.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "213121817809268727351890065969990283938",
            "length": 745.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e72558c1711d524e3150103739ddd06650e291b",
        "id": "CVE-2024-41088-b2a715fc",
        "target": {
            "function": "mcp251xfd_stop",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "137901733592837283551043546995812449161",
            "length": 474.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8fb63e46c884c898a38f061c2330f7729e75510",
        "id": "CVE-2024-41088-c208e246",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-tx.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "151201369741532948331907799151914981606",
                "269677415599025565744980620517182135542",
                "262461281105790762736965603308514806362",
                "192709765133574676070236947788285643832",
                "164149953940047070501529826818159773916",
                "283214861427068980052732126784482098966",
                "124388480069241006081841606370447839239",
                "184598766090512427760607322941917255267",
                "297523266493255491358361122983255029930",
                "316661238373268213275690498660039387683",
                "136658497432200876146240328443336263119",
                "35944883011114628655347985309381416450",
                "238496505570658316221639628756455289756",
                "30759389564152621580120474567362914281",
                "296913699239436971746160589889153997735",
                "322193411047204042420822206825977537588",
                "233227856985257488458400753227970435153"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f926c022ebaabf7963bebf89a97201d66978a025",
        "id": "CVE-2024-41088-c273bb3f",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "285241193485979800084489886293616891704",
                "272430983808496939263883625655740420538",
                "249716946719441802657576625267662555792",
                "165710025763418222223630860950561099320",
                "141268220190281585347966334898465503740",
                "76062087259270941230683306177810291853"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e72558c1711d524e3150103739ddd06650e291b",
        "id": "CVE-2024-41088-c62eace8",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "197648682311536828386834263432770756324",
                "25845601783404051182447469942807963200",
                "278024461884638604419827086433185124408",
                "129749050648720035245481983624795749802",
                "101714125240763769276736198062055510405",
                "101357547443707927087161797263332370844",
                "15858746697893835161018281919539387695",
                "195091867306637976758329957531011019529",
                "15716026463803900330627165855493918968",
                "19955796583538618493125652790385145071",
                "76388229063706490305278773202940279015",
                "125908654647892566075813563307771454596",
                "270059537056652046507327984443202729373",
                "105105400024662164199397969252358709252",
                "229900331326684046347877827320955243227",
                "275090423381506063105360152220420581578"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8fb63e46c884c898a38f061c2330f7729e75510",
        "id": "CVE-2024-41088-d64e5c7d",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "285241193485979800084489886293616891704",
                "272430983808496939263883625655740420538",
                "249716946719441802657576625267662555792",
                "165710025763418222223630860950561099320",
                "141268220190281585347966334898465503740",
                "76062087259270941230683306177810291853"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8fb63e46c884c898a38f061c2330f7729e75510",
        "id": "CVE-2024-41088-d8a76750",
        "target": {
            "function": "mcp251xfd_start_xmit",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-tx.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "213121817809268727351890065969990283938",
            "length": 745.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f926c022ebaabf7963bebf89a97201d66978a025",
        "id": "CVE-2024-41088-d9f398a8",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-tx.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "151201369741532948331907799151914981606",
                "269677415599025565744980620517182135542",
                "262461281105790762736965603308514806362",
                "192709765133574676070236947788285643832",
                "164149953940047070501529826818159773916",
                "283214861427068980052732126784482098966",
                "124388480069241006081841606370447839239",
                "184598766090512427760607322941917255267",
                "297523266493255491358361122983255029930",
                "316661238373268213275690498660039387683",
                "136658497432200876146240328443336263119",
                "35944883011114628655347985309381416450",
                "238496505570658316221639628756455289756",
                "30759389564152621580120474567362914281",
                "296913699239436971746160589889153997735",
                "322193411047204042420822206825977537588",
                "233227856985257488458400753227970435153"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8fb63e46c884c898a38f061c2330f7729e75510",
        "id": "CVE-2024-41088-dd578383",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "197648682311536828386834263432770756324",
                "25845601783404051182447469942807963200",
                "278024461884638604419827086433185124408",
                "129749050648720035245481983624795749802",
                "101714125240763769276736198062055510405",
                "101357547443707927087161797263332370844",
                "15858746697893835161018281919539387695",
                "195091867306637976758329957531011019529",
                "15716026463803900330627165855493918968",
                "19955796583538618493125652790385145071",
                "76388229063706490305278773202940279015",
                "125908654647892566075813563307771454596",
                "270059537056652046507327984443202729373",
                "105105400024662164199397969252358709252",
                "229900331326684046347877827320955243227",
                "275090423381506063105360152220420581578"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c6b4afa59c2fb4d1759235f866d8caed2aa4729",
        "id": "CVE-2024-41088-e191d9d4",
        "target": {
            "function": "mcp251xfd_stop",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "137901733592837283551043546995812449161",
            "length": 474.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e72558c1711d524e3150103739ddd06650e291b",
        "id": "CVE-2024-41088-e68c876a",
        "target": {
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-tx.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "151201369741532948331907799151914981606",
                "269677415599025565744980620517182135542",
                "262461281105790762736965603308514806362",
                "192709765133574676070236947788285643832",
                "164149953940047070501529826818159773916",
                "283214861427068980052732126784482098966",
                "124388480069241006081841606370447839239",
                "184598766090512427760607322941917255267",
                "297523266493255491358361122983255029930",
                "316661238373268213275690498660039387683",
                "136658497432200876146240328443336263119",
                "35944883011114628655347985309381416450",
                "238496505570658316221639628756455289756",
                "30759389564152621580120474567362914281",
                "296913699239436971746160589889153997735",
                "322193411047204042420822206825977537588",
                "233227856985257488458400753227970435153"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f926c022ebaabf7963bebf89a97201d66978a025",
        "id": "CVE-2024-41088-ec3635d2",
        "target": {
            "function": "mcp251xfd_open",
            "file": "drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "18689074015261410142861793674822854745",
            "length": 1219.0
        }
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.10.0

Fixed

6.1.97

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.37

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.9.8