Log in Start free

Vulnerability · Published Jan 31, 2026 · Assigned by Linux

CVE-2026-23037can: etas_es58x: allow partial RX URB allocation to succeed

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 84.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: allow partial RX URB allocation to succeed When es58x_alloc_rx_urbs() fails to allocate the requested number of URBs but succeeds in allocating some, it returns an error code. This causes es58x_open() to return early, skipping the cleanup label 'free_urbs', which leads to the anchored URBs being leaked. As pointed out by maintainer Vincent Mailhol, the driver is designed to handle partial URB allocation gracefully. Therefore, partial allocation should not be treated as a fatal error. Modify es58x_alloc_rx_urbs() to return 0 if at least one URB has been allocated, restoring the intended behavior and preventing the leak in es58x_open().

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.162-1DEBIAN-CVE-2026-23037
Debian:13linux6.12.69-1DEBIAN-CVE-2026-23037
Debian:14linux6.18.8-1DEBIAN-CVE-2026-23037
Ubuntu:22.04:LTSlinux5.15.0-176.186USN-8180-1
Ubuntu:22.04:LTSlinux5.15.0-176.186UBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux6.8.0-117.117UBUNTU-CVE-2026-23037
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-aws5.15.0-1105.112UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-aws5.15.0-1105.112USN-8180-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1055.58UBUNTU-CVE-2026-23037
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1057.60~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure5.15.0-1110.119USN-8180-3
Ubuntu:22.04:LTSlinux-azure5.15.0-1110.119UBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-azure6.8.0-1056.62UBUNTU-CVE-2026-23037
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1021.21~24.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1114.123UBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2026-23037
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gcp5.15.0-1105.114UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gcp5.15.0-1105.114USN-8180-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1058.61UBUNTU-CVE-2026-23037
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1021.24~24.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gke5.15.0-1101.107UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gke5.15.0-1101.107USN-8180-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1054.60UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1088.96UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1088.96USN-8180-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1041.44UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-41.41~24.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-124.124~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-ibm5.15.0-1099.102USN-8180-5
Ubuntu:22.04:LTSlinux-ibm5.15.0-1099.102UBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-ibm6.8.0-1055.56UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1055.56~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1100.106UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1100.106USN-8180-3
Ubuntu:22.04:LTSlinux-kvm5.15.0-1097.102UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-kvm5.15.0-1097.102USN-8180-3
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-175.185UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-175.185USN-8180-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-117.117.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-117.117.1~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1100.101UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1100.101USN-8180-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1054.57UBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1031.31UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1054.57.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1057.57UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1057.57USN-8187-1
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1024.24UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1046.46USN-8187-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1046.46UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1030.30UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-oracle5.15.0-1102.108USN-8180-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1102.108UBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-oracle6.8.0-1054.55UBUNTU-CVE-2026-23037
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1019.19~24.04.3UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1054.55~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-raspi5.15.0-1099.102UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-raspi5.15.0-1099.102USN-8180-6
Ubuntu:24.04:LTSlinux-raspi6.8.0-1056.60UBUNTU-CVE-2026-23037
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23037
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23037
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-117.117~22.04.1UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-23037
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2026-23037
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1070.74USN-8275-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1070.74UBUNTU-CVE-2026-23037

Affected products (as reported)

VendorProductVersions
Linux Linux 8537257874e949a59c834cecfd5a063e11b64b0b – before 97250eb05e4b6afe787290e8fd97d0675116c61b8537257874e949a59c834cecfd5a063e11b64b0b – before aec888f44853584b5a7cd01249806030cf94a73d8537257874e949a59c834cecfd5a063e11b64b0b – before 611e839d2d552416b498ed5593e10670f61fcd4d8537257874e949a59c834cecfd5a063e11b64b0b – before ba45e3d6b02c97dbb4578fbae7027fd66f3caa108537257874e949a59c834cecfd5a063e11b64b0b – before 6c5124a60989051799037834f0a1a4b4287181578537257874e949a59c834cecfd5a063e11b64b0b – before b1979778e98569c1e78c2c7f16bb24d76541ab00
Linux Linux 5.13

References