CVE-2010-2959: Debian Linux

High severity, CVSS 7.2. EPSS: 3.7% chance of exploitation in the next 30 days.

Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.

Affected products

• Debian Debian Linux: version 5.0 only
• Fedoraproject Fedora: version 12 only
• Linux Linux Kernel: before 2.6.27.53 (fixed in 2.6.27.53); from 2.6.32, before 2.6.32.21 (fixed in 2.6.32.21); from 2.6.34, before 2.6.34.6 (fixed in 2.6.34.6); from 2.6.35, before 2.6.35.4 (fixed in 2.6.35.4)
• Opensuse Opensuse: version 11.3 only
• Suse Linux Enterprise Desktop: version 11 only
• Suse Linux Enterprise High Availability Extension: version 11 only
• Suse Linux Enterprise Real Time: version 11 only
• Suse Linux Enterprise Server: version 11 only

Published 2010-09-08. Last modified 2026-06-16.