CVE-2026-72122

A flaw was found in the CAN BCM (Controller Area Network Broadcast Manager) module of the Linux kernel. A race condition exists where a socket intended for a specific CAN interface can silently be reconfigured to receive messages from any interface. This occurs due to inconsistent reads of socket binding parameters while other operations are modifying them. This could lead to unintended information disclosure or bypass of network segmentation. Additionally, a related issue allows bcm_rx_setup() to silently report success even if the target device is unavailable, potentially leading to a denial of service for receive operations.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access with socket creation capabilities, and CAN networking is rarely present in standard enterprise deployments. While an unprivileged local attacker could trigger race conditions during socket binding to mix traffic across CAN interfaces or cause receive operations to fail silently, the issue does not permit arbitrary code execution or privilege escalation. Systems that do not configure or use Controller Area Network devices remain effectively unaffected under standard workloads.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.