CVE-2023-52878: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds If the "struct can_priv::echoo_skb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a meaningful warning message and return with an error.

Affected products

• Linux Linux Kernel: from 2.6.33, before 5.15.139 (fixed in 5.15.139); from 5.16, before 6.1.63 (fixed in 6.1.63); from 6.2, before 6.5.12 (fixed in 6.5.12); from 6.6, before 6.6.2 (fixed in 6.6.2)

Published 2024-05-21. Last modified 2026-06-17.