Linux Kernel ETAS ES58X CAN USB Interface Partial URB Allocation Vulnerability

Vulnerability

A vulnerability in the Linux kernel's handling of USB CAN interfaces, specifically within the ETAS ES58X driver, has been addressed. The issue arose in the function 'es58x_alloc_rx_urbs()', which incorrectly treated partial allocation of USB Request Blocks (URBs) as a fatal error. This mismanagement caused the 'es58x_open()' function to exit prematurely, leading to a leak of allocated URBs. The driver is intended to manage partial allocations properly, and the fix involves modifying the allocation function to return a success code when at least one URB is successfully allocated. This change restores the correct behavior and prevents resource leaks in the 'es58x_open()' function.

Impact

The vulnerability could lead to resource leaks by failing to properly clean up allocated URBs when an error occurs during the allocation process.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Jan 31, 2026, 12:19 PM
Updated: Jan 31, 2026, 12:19 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
7.7
relevance
2.4
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.