Vulnerability in Linux Kernel Affecting Rockchip CAN Bus Notifications

CVE-2025-21774

Summary

A vulnerability exists within the Linux kernel's handling of Rockchip CAN bus notifications. Specifically, the function rkcanfd_handle_rx_fifo_overflow_int() contains a flaw that may allow a null pointer dereference in situations where socket buffer (skb) allocation fails. This oversight prevents the function from appropriately terminating operations under error conditions, potentially leading to stability issues or unexpected behavior in systems utilizing Rockchip drivers. The vulnerability has been addressed to ensure that the function exits gracefully if skb cannot be allocated, thereby enhancing system resilience.

References