Vulnerability · Published Dec 24, 2025 · Assigned by Linux
CVE-2023-54105can: isotp: check CAN address family in isotp_bind()
Unrated
In plain English
A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address family in isotp_bind() Add missing check to block non-AF_CAN binds. Syzbot created some code which matched the right sockaddr struct size but used AF_XDP (0x2C) instead of AF_CAN (0x1D) in the address family field: bind$xdp(r2, &(0x7f0000000540)={0x2c, 0x0, r4, 0x0, r2}, 0x10) ^^^^ This has no funtional impact but the userspace should be notified about the wrong address family field content.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.20-1 | DEBIAN-CVE-2023-54105 |
| Debian:13 | linux | 6.1.20-1 | DEBIAN-CVE-2023-54105 |
| Debian:14 | linux | 6.1.20-1 | DEBIAN-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux-aws | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux-aws | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-aws-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-aws-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-aws-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux-azure | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux-azure | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux-azure-fde | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-fde-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-fde-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-fde-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-azure-nvidia-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux-gcp | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux-gcp | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-gcp-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-gcp-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-gcp-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-gkeop | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-gkeop | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-hwe-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-hwe-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-hwe-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-intel-iotg | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-kvm | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-lowlatency | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-lowlatency | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-nvidia-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-nvidia-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-nvidia-bos | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-oem-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-oem-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-oem-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux-oracle | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux-oracle | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-oracle-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-oracle-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-oracle-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux-raspi | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux-raspi | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux-realtime | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux-realtime | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:25.10 | linux-riscv | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:26.10 | linux-riscv | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-riscv-6.14 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-riscv-6.17 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-riscv-7.0 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-vmware | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:24.04:LTS | linux-xilinx | no fix listed | UBUNTU-CVE-2023-54105 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | no fix listed | UBUNTU-CVE-2023-54105 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | e057dd3fc20ffb3d7f150af46542a51b59b90127 – before de3c02383aa678f6799402ac47fdd89cf4bfcaa9e057dd3fc20ffb3d7f150af46542a51b59b90127 – before 2fc6f337257f4f7c21ecff429241f7acaa6df4e8e057dd3fc20ffb3d7f150af46542a51b59b90127 – before 9427584c2f153d0677ef3bad6f44028c60d728c4e057dd3fc20ffb3d7f150af46542a51b59b90127 – before dd4faace51e41a82a8c0770ee0cc26088f9d9d06e057dd3fc20ffb3d7f150af46542a51b59b90127 – before c6adf659a8ba85913e16a571d5a9bcd17d3d1234 |
| Linux | Linux | 5.10 |
References
- https://git.kernel.org/stable/c/de3c02383aa678f6799402ac47fdd89cf4bfcaa9
- https://git.kernel.org/stable/c/2fc6f337257f4f7c21ecff429241f7acaa6df4e8
- https://git.kernel.org/stable/c/9427584c2f153d0677ef3bad6f44028c60d728c4
- https://git.kernel.org/stable/c/dd4faace51e41a82a8c0770ee0cc26088f9d9d06
- https://git.kernel.org/stable/c/c6adf659a8ba85913e16a571d5a9bcd17d3d1234