Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23031

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak In gs_can_open(), the URBs for USB-in transfers are allocated, added to the parent->rx_submitted anchor and submitted. In the complete callback gs_usb_receive_bulk_callback(), the URB is processed and resubmitted. In gs_can_close() the URBs are freed by calling usb_kill_anchored_urbs(parent->rx_submitted). However, this does not take into account that the USB fr
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9fbdc90eb63a07fe001b9cc34a39cacf3bdfde5ef0d2ffd4c48527ab9831570a
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 3 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/can/usb/gs_usb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9c151898cc259a7784be60ba38664f42ede39b31","status":"affected","version":"d08e973a77d128b25e01a08c34d89593fdf222da","versionType":"git"},{"lessThan":"ec5ccc2af9e5b045671f3f604b57512feda8bcc5","status":"affected","version":"d08e973a77d128b25e01a08c34d89593fdf222da","versionType":"git"},{"lessThan":"f905bcfa971edb89e398c98957838d8c6381c0c7","status":"affected","version":"d08e973a77d128b25…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","vendor":"Siemens","versions":[{"lessThan":"V4.0","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/adp/0/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/can/usb/gs_usb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.16"},{"lessThan":"3.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.122","versionType":"semver"},{"le…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/affected/1

Affected products and versions

3 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/can/usb/gs_usb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9c151898cc259a7784be60ba38664f42ede39b31","status":"affected","version":"d08e973a77d128b25e01a08c34d89593fdf222da","versionType":"git"},{"lessThan":"ec5ccc2af9e5b045671f3f604b57512feda8bcc5","status":"affected","version":"d08e973a77d128b25e01a08c34d89593fdf222da","versionType":"git"},{"lessThan":"f905bcfa971edb89e398c98957838d8c6381c0c7","status":"affected","version":"d08e973a77d128b25…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","vendor":"Siemens","versions":[{"lessThan":"V4.0","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/adp/0/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/can/usb/gs_usb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.16"},{"lessThan":"3.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.122","versionType":"semver"},{"le…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/adp/0/references/0
{"url":"https://git.kernel.org/stable/c/08624b7206ddb9148eeffc2384ebda2c47b6d1e9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/7352e1d5932a0e777e39fa4b619801191f57e603"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/9c151898cc259a7784be60ba38664f42ede39b31"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/9f669a38ca70839229b7ba0f851820850a2fe1f7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/ec5ccc2af9e5b045671f3f604b57512feda8bcc5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/f905bcfa971edb89e398c98957838d8c6381c0c7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:239f8d6e921250e03568b89b6fc7f753d10c39fa6c4d910c7f2d5da31f66f455 · sha256:5e8fa9cb4d077045… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer