CVE-2025-40020

In the Linux kernel, the following vulnerability has been resolved:

can: peak_usb: fix shift-out-of-bounds issue

Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 (which is the case for PC CAN FD interfaces supported by this driver).

[mkl: update subject, apply manually]

The fix changes 1 to 1ULL so the operation occurs in 64-bit space, preventing overflow. The impact is limited to incorrect timestamp calculations or potential driver instability when using PEAK-System CAN-USB FD adapters.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.