You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
can bus safety
About this tag
The tag covers discussions about Controller Area Network (CAN) bus safety, particularly in the context of Linux kernel drivers. A recent thread highlights CVE-2025-68343, a vulnerability in the GS_USB CAN driver that could lead to kernel memory corruption due to a missing length check. This underscores the importance of proper input validation in CAN bus implementations to prevent system crashes and reliability issues. The tag is relevant for users and administrators working with CAN devices on Linux systems, especially those concerned with security patches and kernel updates.
A subtle but consequential flaw in the Linux kernel’s GS_USB CAN driver has been assigned CVE-2025-68343 after maintainers fixed a missing length check in the gs_usb_receive_bulk_callback handler. The bug allowed the driver to assume a full header was present in an incoming USB bulk transfer...