CVE-2026-23155

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23155
In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Sinc commit 79a6d1bfe114 ("can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error") a failing resubmit URB will print an info message. In the case of a short read where netdev has not yet been assigned, initialize as NULL to avoid dereferencing an undefined value. Also report the error value of the failed resubmit.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/494fc029f662c331e06b7c2031deff3c64200eed Patch
https://git.kernel.org/stable/c/713ba826ae114ab339c9a1b31e209bebdadb0ac9 Patch
https://git.kernel.org/stable/c/7a431df418ee6b79841e0b4c7c265a791e3d0a75
https://git.kernel.org/stable/c/8986cdf52f86208df9c7887fee23365b5d37da26 Patch
https://git.kernel.org/stable/c/923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6 Patch
https://git.kernel.org/stable/c/aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:6.6.122:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12.68:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.18.8:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
History

18 Apr 2026, 09:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7a431df418ee6b79841e0b4c7c265a791e3d0a75 -

18 Mar 2026, 14:42

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/494fc029f662c331e06b7c2031deff3c64200eed - () https://git.kernel.org/stable/c/494fc029f662c331e06b7c2031deff3c64200eed - Patch
References () https://git.kernel.org/stable/c/713ba826ae114ab339c9a1b31e209bebdadb0ac9 - () https://git.kernel.org/stable/c/713ba826ae114ab339c9a1b31e209bebdadb0ac9 - Patch
References () https://git.kernel.org/stable/c/8986cdf52f86208df9c7887fee23365b5d37da26 - () https://git.kernel.org/stable/c/8986cdf52f86208df9c7887fee23365b5d37da26 - Patch
References () https://git.kernel.org/stable/c/923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6 - () https://git.kernel.org/stable/c/923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6 - Patch
References () https://git.kernel.org/stable/c/aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5 - () https://git.kernel.org/stable/c/aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.12.68:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6.122:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.18.8:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Feb 2026, 17:52

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: can: gs_usb: gs_usb_receive_bulk_callback(): corregir mensaje de error Desde el commit 79a6d1bfe114 ('can: gs_usb: gs_usb_receive_bulk_callback(): desanclar URL en error de usb_submit_urb()'), un URB de reenvío fallido imprimirá un mensaje de información. En el caso de una lectura corta donde netdev aún no ha sido asignado, inicializar como NULL para evitar desreferenciar un valor indefinido. También informar el valor de error del reenvío fallido.

14 Feb 2026, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-14 16:15

Updated : 2026-04-18 09:16

NVD link : CVE-2026-23155

Mitre link : CVE-2026-23155

CVE.ORG link : CVE-2026-23155

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference