CVE-2024-46771

A flaw was found in the Linux kernel's CAN BCM (Broadcast Manager) module. A local user could repeatedly connect and disconnect a virtual CAN device, leading to a resource leak of proc entries. This resource exhaustion could result in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the can-bcm kernel module from loading. Create a file named /etc/modprobe.d/blacklist-can-bcm.conf with the following content:

blacklist can-bcm

Then, regenerate the initramfs and reboot the system for the changes to take effect. This may impact functionality relying on the CAN BCM module.