CVE-2026-23995

EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ (16) to CAN open routines overflows `ifreq.ifr_name`, corrupting adjacent stack data and enabling potential code execution. A malicious or misconfigured interface name can trigger this before any privilege checks. Version 2026.02.0 contains a patch.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/EVerest/EVerest/security/advisories/GHSA-p47c-2jpr-mpwx	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:linuxfoundation:everest:*:*:*:*:*:*:*:*

History

31 Mar 2026, 13:49

Type	Values Removed	Values Added
First Time		Linuxfoundation Linuxfoundation everest
References	~~() https://github.com/EVerest/EVerest/security/advisories/GHSA-p47c-2jpr-mpwx -~~	() https://github.com/EVerest/EVerest/security/advisories/GHSA-p47c-2jpr-mpwx - Exploit, Vendor Advisory
CPE		cpe:2.3:o:linuxfoundation:everest::::::::

30 Mar 2026, 13:26

Type	Values Removed	Values Added
Summary		(es) EVerest es una pila de software de carga de VE. Antes de la versión 2026.02.0, desbordamiento de búfer basado en pila en la inicialización de la interfaz CAN: pasar un nombre de interfaz más largo que IFNAMSIZ (16) a las rutinas de apertura de CAN desborda 'ifreq.ifr_name', corrompiendo datos adyacentes de la pila y permitiendo la ejecución potencial de código. Un nombre de interfaz malicioso o mal configurado puede activar esto antes de cualquier verificación de privilegios. La versión 2026.02.0 contiene un parche.

26 Mar 2026, 15:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-03-26 15:16

Updated : 2026-03-31 13:49

NVD link : CVE-2026-23995

Mitre link : CVE-2026-23995

CVE.ORG link : CVE-2026-23995

JSON object : View

Products Affected

linuxfoundation

everest

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2026-23995", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2026-03-26T15:16:32.137", "references": [{"url": "https://github.com/EVerest/EVerest/security/advisories/GHSA-p47c-2jpr-mpwx", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ (16) to CAN open routines overflows `ifreq.ifr_name`, corrupting adjacent stack data and enabling potential code execution. A malicious or misconfigured interface name can trigger this before any privilege checks. Version 2026.02.0 contains a patch."}, {"lang": "es", "value": "EVerest es una pila de software de carga de VE. Antes de la versi\u00f3n 2026.02.0, desbordamiento de b\u00fafer basado en pila en la inicializaci\u00f3n de la interfaz CAN: pasar un nombre de interfaz m\u00e1s largo que IFNAMSIZ (16) a las rutinas de apertura de CAN desborda 'ifreq.ifr_name', corrompiendo datos adyacentes de la pila y permitiendo la ejecuci\u00f3n potencial de c\u00f3digo. Un nombre de interfaz malicioso o mal configurado puede activar esto antes de cualquier verificaci\u00f3n de privilegios. La versi\u00f3n 2026.02.0 contiene un parche."}], "lastModified": "2026-03-31T13:49:39.677", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linuxfoundation:everest:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB167E67-6808-4F7B-9505-FFF0C02B288C", "versionEndExcluding": "2026.02.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}