You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
can raw sockets
About this tag
The tag 'can raw sockets' covers discussions about the Controller Area Network (CAN) raw socket implementation in the Linux kernel. Content under this tag focuses on a specific security vulnerability, CVE-2026-31532, which addresses a use-after-free bug in the raw_rcv() function. The flaw occurs because raw_release() unregisters CAN receive filters while receiver deletion is deferred via call_rcu(), creating a window where raw_rcv() can access freed memory. The fix moves free_percpu(ro->uniq) to a raw-specific socket destructor to ensure proper teardown. This tag is relevant for developers and system administrators working with CAN networking on Linux, particularly those concerned with kernel security and memory management.
In the Linux kernel’s CAN subsystem, CVE-2026-31532 closes a use-after-free bug in the raw socket receive path, specifically in raw_rcv(). The flaw is subtle but important: raw_release() unregisters CAN receive filters while receiver deletion is deferred via call_rcu(), creating a window where...