CVE-2025-38004

A flaw was found in the Linux kernel's Controller Area Network (CAN) broadcast manager (BCM). Improper locking during runtime updates of internal counters in the bcm_can_tx() function allows a local attacker to trigger a slab-out-of-bounds read access. This vulnerability can lead to information disclosure or a denial of service (DoS) condition, potentially compromising system stability or sensitive data.

This Moderate vulnerability in the Linux kernel's CAN broadcast manager (CAN BCM) allows a local attacker to achieve a slab-out-of-bounds read. This flaw can be triggered from user space due to improper locking during runtime updates of the currframe counter within the bcm_can_tx() function.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.