Linux Kernel CAN ID Sanitation Vulnerability in ISOTP Component

A vulnerability in the Linux kernel's ISOTP (Inter-Segment Transport Protocol) component has been addressed. The issue arose because the isotp_bind() function did not properly sanitize CAN ID values before performing address checks. This flaw allowed for the creation of a state machine status that could not be reached with a compliant CAN ID configuration. The vulnerability was triggered using specific CAN ID values that, when processed, effectively reduced to an 11-bit CAN ID of 0x001 for both sending and receiving.

Impact

Exploitation of this vulnerability could lead to improper handling of CAN IDs, potentially causing communication issues or allowing for unintended interactions within the CAN network.