CVE-2022-49659: can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits In commit 1be37d3b0414 ("can: m_can: fix periph RX path: use rx-offload to ensure skbs are sent from softirq context") the RX path for peripheral devices was switched to RX-offload. Received CAN frames are pushed to RX-offload together with a timestamp. RX-offload is designed to handle overflows of the timestamp correctly, if 32 bit timestamps are provided. The timestamps of m_can core are only 16 bits wide. So this patch shifts them to full 32 bit before passing them to RX-offload.

Affected products

Linux kernel: from 5.13 before 5.15.54; from 5.16 before 5.18.11; 5.19-rc1, 5.19-rc2, 5.19-rc3, 5.19-rc4, 5.19-rc5 — fixed in 5.15.54, 5.18.11

How to fix

Upgrade to a fixed version: Linux kernel 5.15.54, 5.18.11. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-49659 or the next vulnerability affects your stack