Linux Kernel Out-of-Bound Read Vulnerability in CAN UCAN Subsystem

A vulnerability in the Linux kernel's CAN UCAN subsystem allows for an out-of-bounds read due to improper handling of string termination. The issue arises from a commit that replaced 'strncpy()' with 'strscpy()', which is intended to be a safer alternative. However, 'strscpy()' can read one byte beyond the intended limit if the source string is not properly null-terminated, leading to a potential information leak. This vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability could lead to unintended memory access, potentially causing information disclosure or allowing for further exploitation.