CVE-2026-17523

can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

HIGH

7.8

CVSS Score

Published: July 27, 2026 at 08:58 AM UTC

Updated: October 2, 2026 at 03:12 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Red Hat Enterprise Linux 10 by Red Hat?

Get instant alerts when new vulnerabilities affect Red Hat Enterprise Linux 10 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

A flaw was found in the kernel. An unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation (LPE). This allows the attacker to gain root privileges and take full control of the affected system.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.29 ≤ v < 4.19.2262.6.29 ≤ v < 5.42.6.29.1 ≤ v < 4.19.2264.20 ≤ v < 5.42.6.292.6.29 rc22.6.29 rc3 2.6.29 rc4 2.6.29 rc5 2.6.29 rc6 2.6.29 rc7 2.6.29 rc8c53a6ee88b0a91bd012ef1b7988c0b93dae6f24d

Vendor states this is fixed in 79305a826f872fe446c6fbf8450f515053ef6951 (fixed)

Vendor states this is fixed in bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68 (fixed)

Vendor states this is fixed in 2.6.29 (unaffected)

Vendor states this is fixed in 4.19.226 (unaffected)

Vendor states this is fixed in 5.4 (unaffected)