In the Linux kernel, the following vulnerability has been resolved:
can: isotp: split tx timer into transmission and timeout
The timer for the transmission of isotp PDUs formerly had two functions: 1. send two consecutive frames with a given time gap 2. monitor the timeouts for flow control frames and the echo frames
This led to larger txstate checks and potentially to a problem discovered by syzbot which enabled the paniconwarn feature while testing.
The former 'txtimer' function is split into 'txfrtimer' and 'txtimer' to handle the two above functionalities with separate timer callbacks.
The two simplified timers now run in one-shot mode and make the state transitions (especially with isotprcvecho) better understandable.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52941.json",
"cna_assigner": "Linux"
}[
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae4c9bc35f72af5d4a079bb9d9fd62c4088a411",
"signature_type": "Line",
"id": "CVE-2023-52941-187c057e",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"8932572275003106298853774498596138252",
"165786401459472283220059228511314259246",
"113355300187946414225874440543228800003",
"214533666790764596525239588126223374847",
"86976008156459715848789040421703050075",
"4367475309645782264236329515079164846",
"305249758412772042517378270630820582882",
"339743177536744176282198093002840781166",
"56848381110684160382545546822603491566",
"156895191803594331375006023703002600206",
"39312937249728011627728373912279977033",
"150983738590821517742842275264712771043",
"310521509347743085096104631717022495147",
"333751311543998241849910428943293732856",
"161521181667680169994798218502587287908",
"19307044916209837235437111055763722400",
"126732268268453157047889534978384566934",
"94071034108603446563913121523361383048",
"327989936969571535093982055370938838245",
"24489640471770393608000882981378659159",
"82076785951086042816557162111625060705",
"176575544189399707801647972963885571839",
"251859206459607350112406100489204930598",
"113899610076870621481254727327228644353",
"54893771791639735739684018906299286090",
"239451846553655264392927734158006238405",
"299604602553745673255840796681428941356",
"270035547831066778087719888815779687629",
"113978047396835380294034369764292801132",
"102446600459432974723169201974281272301",
"89919220098462316396208226497827687350",
"153437648312918633179227744611082384423",
"35960762137183790025621479516062584472",
"191195268687323397718944950150893344888",
"192783353982440525049081420407835909275",
"191783598699934272345123286560240983880",
"212017900493559824643982411653905591090",
"111872756332595338653987063828210278795",
"121561155754210092046251122465514247920",
"305792367562620651874085406101707590886",
"231298395090724154947184897992455816787",
"102538741992484052745193791205931064368",
"22153877367403733856650717036755432771",
"244371171614816469882436384141940263391"
]
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c",
"function": "isotp_init"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f027cba8216f42a18b544842efab134f8b1f9f4",
"signature_type": "Function",
"id": "CVE-2023-52941-3511669e",
"deprecated": false,
"digest": {
"function_hash": "144850400462099940682121451190118739472",
"length": 1391.0
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c",
"function": "isotp_init"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae4c9bc35f72af5d4a079bb9d9fd62c4088a411",
"signature_type": "Function",
"id": "CVE-2023-52941-3e9f3a54",
"deprecated": false,
"digest": {
"function_hash": "144850400462099940682121451190118739472",
"length": 1391.0
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c",
"function": "isotp_tx_timer_handler"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae4c9bc35f72af5d4a079bb9d9fd62c4088a411",
"signature_type": "Function",
"id": "CVE-2023-52941-77683676",
"deprecated": false,
"digest": {
"function_hash": "332483538472136787272061971604821576893",
"length": 808.0
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c",
"function": "isotp_release"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f027cba8216f42a18b544842efab134f8b1f9f4",
"signature_type": "Function",
"id": "CVE-2023-52941-7987e64a",
"deprecated": false,
"digest": {
"function_hash": "20921199256026533867049213262072303678",
"length": 1125.0
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c",
"function": "isotp_release"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae4c9bc35f72af5d4a079bb9d9fd62c4088a411",
"signature_type": "Function",
"id": "CVE-2023-52941-8efbcefe",
"deprecated": false,
"digest": {
"function_hash": "309642850876592443959827692761111842566",
"length": 1059.0
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f027cba8216f42a18b544842efab134f8b1f9f4",
"signature_type": "Line",
"id": "CVE-2023-52941-b8930389",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"8932572275003106298853774498596138252",
"165786401459472283220059228511314259246",
"113355300187946414225874440543228800003",
"214533666790764596525239588126223374847",
"86976008156459715848789040421703050075",
"4367475309645782264236329515079164846",
"305249758412772042517378270630820582882",
"339743177536744176282198093002840781166",
"56848381110684160382545546822603491566",
"156895191803594331375006023703002600206",
"39312937249728011627728373912279977033",
"150983738590821517742842275264712771043",
"310521509347743085096104631717022495147",
"333751311543998241849910428943293732856",
"161521181667680169994798218502587287908",
"19307044916209837235437111055763722400",
"126732268268453157047889534978384566934",
"94071034108603446563913121523361383048",
"327989936969571535093982055370938838245",
"24489640471770393608000882981378659159",
"82076785951086042816557162111625060705",
"176575544189399707801647972963885571839",
"251859206459607350112406100489204930598",
"113899610076870621481254727327228644353",
"54893771791639735739684018906299286090",
"239451846553655264392927734158006238405",
"299604602553745673255840796681428941356",
"270035547831066778087719888815779687629",
"113978047396835380294034369764292801132",
"102446600459432974723169201974281272301",
"89919220098462316396208226497827687350",
"153437648312918633179227744611082384423",
"35960762137183790025621479516062584472",
"191195268687323397718944950150893344888",
"192783353982440525049081420407835909275",
"191783598699934272345123286560240983880",
"212017900493559824643982411653905591090",
"111872756332595338653987063828210278795",
"121561155754210092046251122465514247920",
"305792367562620651874085406101707590886",
"231298395090724154947184897992455816787",
"102538741992484052745193791205931064368",
"22153877367403733856650717036755432771",
"244371171614816469882436384141940263391"
]
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c",
"function": "isotp_tx_timer_handler"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f027cba8216f42a18b544842efab134f8b1f9f4",
"signature_type": "Function",
"id": "CVE-2023-52941-cb4231cc",
"deprecated": false,
"digest": {
"function_hash": "332483538472136787272061971604821576893",
"length": 808.0
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c",
"function": "isotp_rcv_echo"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae4c9bc35f72af5d4a079bb9d9fd62c4088a411",
"signature_type": "Function",
"id": "CVE-2023-52941-ef05b489",
"deprecated": false,
"digest": {
"function_hash": "242148229017846325801674647428088349500",
"length": 845.0
}
},
{
"signature_version": "v1",
"target": {
"file": "net/can/isotp.c",
"function": "isotp_rcv_echo"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f027cba8216f42a18b544842efab134f8b1f9f4",
"signature_type": "Function",
"id": "CVE-2023-52941-fe6e9451",
"deprecated": false,
"digest": {
"function_hash": "242148229017846325801674647428088349500",
"length": 845.0
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52941.json"