{ "id": "CVE-2022-49269", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:03.813", "lastModified": "2025-02-26T07:01:03.813", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: isotp: sanitize CAN ID checks in isotp_bind()\n\nSyzbot created an environment that lead to a state machine status that\ncan not be reached with a compliant CAN ID address configuration.\nThe provided address information consisted of CAN ID 0x6000001 and 0xC28001\nwhich both boil down to 11 bit CAN IDs 0x001 in sending and receiving.\n\nSanitize the SFF/EFF CAN ID values before performing the address checks." }, { "lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: isotp: sanitize CAN ID checks in isotp_bind() Syzbot cre\u00f3 un entorno que condujo a un estado de m\u00e1quina de estados al que no se puede acceder con una configuraci\u00f3n de direcci\u00f3n CAN ID compatible. La informaci\u00f3n de direcci\u00f3n proporcionada consist\u00eda en CAN ID 0x6000001 y 0xC28001, que se reducen a 11 bits CAN ID 0x001 en env\u00edo y recepci\u00f3n. Sanitize los valores SFF/EFF CAN ID antes de realizar las comprobaciones de direcci\u00f3n." } ], "metrics": {}, "references": [ { "url": "https://git.kernel.org/stable/c/3ea566422cbde9610c2734980d1286ab681bb40e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, { "url": "https://git.kernel.org/stable/c/7b4652fc71dcec043977a6def80ef5034c913615", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, { "url": "https://git.kernel.org/stable/c/cf522d741f5301223cc94b978eb1603c7590d65e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, { "url": "https://git.kernel.org/stable/c/d72866a7f5326160d2a9d945a33eb6ef1883e25d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, { "url": "https://git.kernel.org/stable/c/f343dbe82314ab457153c9afd970be4e9e553020", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] }