CVE-2026-74460

A flaw was found in the Linux kernel's ems_usb module. This vulnerability occurs because the ems_usb_read_bulk_callback() function, which processes Controller Area Network (CAN) Protocol Converter (CPC) messages from a USB receive buffer, does not properly validate the lengths of these messages. An attacker could exploit this by sending specially crafted CPC messages, potentially leading to a denial of service due to a format error when processing the malformed data.

Red Hat rates the impact of this vulnerability as Moderate because exploitation requires local access and the presence of specialized USB CAN hardware, limiting the attack scope to a local denial of service. The ems_usb driver is not loaded by default on Red Hat Enterprise Linux systems unless an EMS CPC-USB adapter is connected or emulated through virtualization. Systems without this specific hardware attached remain unaffected under normal operating conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.