Linux vulnerability

What happened

In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet This patch switches the timer to HRTIMER_MODE_SOFT, which executed the timer callback in softirq context and removes the hrtimer_tasklet.

Affected versions

Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 79305a826f872fe446c6fbf8450f515053ef6951 (git); 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68 (git); before 4.19.226 (semver) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.