CVE-2026-23362 addresses a locking vulnerability in the Linux kernel's CAN BCM module, specifically a missing spin_lock_init() call during the allocation of bcm_op in bcm_rx_setup() for handling Remote Transmission Request (RTR) frames. This oversight could lead to improper locking when the RX bcm_op uses bcm_can_tx(). No official CVSS score is available, and its EPSS score is extremely low (0.00024), indicating a very low probability of exploitation, with a FAUCET Risk Score of 20/100 suggesting limited security impact. There is currently no evidence of active exploitation, nor is any public exploit code available on platforms like Metasploit or ExploitDB, and community discussion and media coverage are absent.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.10.238, < 5.10.253CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.15.185, < 5.15.203CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.4.294, < 5.5CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.1.141, < 6.1.167CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.12.31, < 6.12.77CPE match | cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026Linux kernel vulnerabilities
Jul 24, 2026Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026Linux kernel (Azure FIPS) vulnerabilities
Jul 24, 2026Linux kernel (Azure CVM) vulnerabilities
Jul 24, 2026Linux kernel (Azure) vulnerabilities
Jul 24, 2026Linux kernel (AWS) vulnerabilities
Jul 24, 2026Linux kernel (NVIDIA) vulnerabilities
Jul 23, 2026Linux kernel (Oracle) vulnerabilities
Jul 23, 2026Linux kernel vulnerabilities
Jul 23, 2026Linux kernel (NVIDIA Tegra) vulnerabilities
Jul 21, 2026Linux kernel vulnerabilities
Jul 21, 2026Linux kernel (GCP FIPS) vulnerabilities
Jul 21, 2026Linux kernel vulnerabilities
Jul 20, 2026can: bcm: fix locking for bcm_op runtime updates
Mar 10, 2026