CVE-2025-39987: Linux 4.12

Affected technology

Linux · 57e83fb9b7468c75cb65cde1d23043553c346c6d to before f2c247e9581024d8b3dd44cbe086bf2bebbef42c, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before 8f351db6b2367991f0736b2cff082f5de4872113, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before 7ab85762274c0fa997f0ef9a2307b2001aae43c4, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before 57d332ce8c921d0e340650470bb0c1d707f216ee, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before be1b25005fd0f9d4e78bec6695711ef87ee33398, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before def814b4ba31b563584061d6895d5ff447d5bc14, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before e77fdf9e33a83a08f04ab0cb68c19ddb365a622f, 57e83fb9b7468c75cb65cde1d23043553c346c6d to before ac1c7656fa717f29fac3ea073af63f0b9919ec9a
Linux

Linux · 4.12
Linux

Component: Not specified by the source
Function: of
File: drivers/net/can/spi/hi311x.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source says unfortunately, because the sun4i_can driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)) to inject a malicious CAN XL frames. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.