Linux Kernel Vulnerability in CAN Protocol Handling by Vendor

CVE-2026-99066

What is CVE-2026-99066?

A vulnerability in the Linux kernel's CAN protocol handling has been identified where improper initialization of socket buffer headers leads to potential packet reception issues. Specifically, the removal of critical skb header reset calls during packet processing can cause a condition where the mac_header is incorrectly set, resulting in an overflow during the length calculation process. This can trigger a kernel panic, potentially crashing the entire system. The issue echoes a previously reported safety flaw addressed in the past, underscoring the importance of proper packet handling safeguards.

References