CVE-2025-39988: Linux 5.13

Affected technology

Linux · 8537257874e949a59c834cecfd5a063e11b64b0b to before 72de0facc50afdb101fb7197d880407f1abfc77f, 8537257874e949a59c834cecfd5a063e11b64b0b to before c4e582e686c4d683c87f2b4a316385b3d81d370f, 8537257874e949a59c834cecfd5a063e11b64b0b to before cbc1de71766f326a44bb798aeae4a7ef4a081cc9, 8537257874e949a59c834cecfd5a063e11b64b0b to before b26cccd87dcddc47b450a40f3b1ac3fe346efcff, 8537257874e949a59c834cecfd5a063e11b64b0b to before e587af2c89ecc6382c518febea52fa9ba81e47c0, 8537257874e949a59c834cecfd5a063e11b64b0b to before 38c0abad45b190a30d8284a37264d2127a6ec303
Linux

Linux · 5.13
Linux

Component: Not specified by the source
Function: of
File: drivers/net/can/usb/etas_es58x/es58x_core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source says unfortunately, because the etas_es58x driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)); to inject a malicious CAN XL frames. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.