CVE-2026-68387 is a vulnerability in Linux Kernel
Published on August 10, 2026
can: raw: add locking for raw flags bitfield
In the Linux kernel, the following vulnerability has been resolved:
can: raw: add locking for raw flags bitfield
With commit 890e5198a6e5 ("can: raw: use bitfields to store flags in
struct raw_sock") the formerly separate integer values have been integrated
into a single bitfield. This led to a read-modify-write operation when
changing a flag in raw_setsockopt() which now needs a locking to prevent
concurrent access.
Instead of adding a lock/unlock hell in each of the flag manipulations this
patch introduces a wrapper for a new raw_setsockopt_locked() function
analogue to the isotp_setsockopt[_locked]() approach in net/can/isotp.c
[mkl: use Closes tag instead of Link]
Products Associated with CVE-2026-68387
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 890e5198a6e5b238627c245fafea1a92670a86cd and below 00ba4bf8798242253fefc1fa6a78db1d445fd024 is affected.
- Version 890e5198a6e5b238627c245fafea1a92670a86cd and below 57791aab1129c9405f84bb0882de58967d8b44cd is affected.
- Version 890e5198a6e5b238627c245fafea1a92670a86cd and below 1e5185c090589f4146d728ab36417d8a5419f127 is affected.
- Version 6.18 is affected.
- Before 6.18 is unaffected.
- Version 6.18.42, <= 6.18.* is unaffected.
- Version 7.1.6, <= 7.1.* is unaffected.
- Version 7.2-rc4, <= * is unaffected.