Buffer Handling Issue in Kvaser PCIEFD CAN Driver for Linux Kernel

CVE-2025-38224

What is CVE-2025-38224?

A vulnerability has been discovered in the Kvaser PCI Express FD CAN driver within the Linux kernel, where the echo_skb_max handling logic is improperly managed. Specifically, the maximum size for echo_skb[] is incorrectly rounded up to the nearest power of two, which can lead to out-of-bounds memory access under certain conditions. This flaw was reported by the Linux Verification Center using Syzkaller, highlighting a potential for accessing invalid memory addresses during the acknowledgment packet handling process, posing risks of data corruption or system instability during CAN operations.

References