Race Condition The advisory has been revoked - it doesn't affect any version of package kernel-selftests-internal  (opens in a new tab)


Threat Intelligence

EPSS
0.2% (11th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS9-KERNELSELFTESTSINTERNAL-9544228
  • published28 Mar 2025
  • disclosed27 Mar 2025

Introduced: 27 Mar 2025

CVE-2023-52941  (opens in a new tab)
CWE-366  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-selftests-internal package and not the kernel-selftests-internal package as distributed by Centos.

In the Linux kernel, the following vulnerability has been resolved:

can: isotp: split tx timer into transmission and timeout

The timer for the transmission of isotp PDUs formerly had two functions:

  1. send two consecutive frames with a given time gap
  2. monitor the timeouts for flow control frames and the echo frames

This led to larger txstate checks and potentially to a problem discovered by syzbot which enabled the panic_on_warn feature while testing.

The former 'txtimer' function is split into 'txfrtimer' and 'txtimer' to handle the two above functionalities with separate timer callbacks.

The two simplified timers now run in one-shot mode and make the state transitions (especially with isotp_rcv_echo) better understandable.