Bus-Off Recovery Vulnerability in SJA1000 CAN Controller Driver by Zephyr Project

CVE-2023-5563

What is CVE-2023-5563?

The SJA1000 CAN controller driver in the Zephyr Project contains a vulnerability wherein it attempts automatic recovery from a bus-off event while operating in IRQ context. When configured with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y, this behavior triggers a call to k_sleep(), leading to a fatal exception and potential instability within the system. This issue highlights the importance of proper IRQ context management within device drivers.

References