CVE-2023-54105

A missing input validation was found in the Linux kernel's CAN ISO-TP protocol implementation. The isotp_bind() function does not verify that the address family in the sockaddr structure is AF_CAN. This allows bind calls with incorrect address families (such as AF_XDP) to succeed without proper error notification to userspace.

The commit explicitly states this issue "has no functional impact" — the bind operation works correctly regardless of the address family value provided. This is purely an input validation improvement to return proper error codes to userspace applications using incorrect address families. There is no crash, memory corruption, or security vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.