U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-72126 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize_rcu() in isotp_release() isotp_notify() unregisters the (RCU) CAN filters via can_rx_unregister() and clears so->bound without waiting for a grace period. isotp_release() uses so->bound to decide whether it needs to call synchronize_rcu() before cancelling so->rxtimer, so when NETDEV_UNREGISTER runs first it skips that synchronize_rcu() and can cancel the timer while an in-flight isotp_rcv() is still executing and about to re-arm it via isotp_send_fc(), leading to a use-after-free timer callback on the freed socket. sakisho-bot remarked a problem with rtnl_lock held in isotp_notify(), therefore make isotp_release() always call synchronize_rcu() before cancelling the timers, regardless of so->bound. This still closes the original race (isotp_notify() clearing so->bound without waiting for in-flight isotp_rcv() callers before isotp_release() cancels the RX timer) without adding any RCU wait to the netdevice notifier path.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/15413a082df69175c2f96aeab4c26fe1ff7cff03 kernel.org
https://git.kernel.org/stable/c/59672aa4bcd8d32172c1ff6a179583981d6acabc kernel.org
https://git.kernel.org/stable/c/6280eda96e0707264849fa7d036fed873c1f8a6d kernel.org
https://git.kernel.org/stable/c/945d9894502cd9124f5d676181c542ed2000f7c0 kernel.org
https://git.kernel.org/stable/c/9b1a02e0d980ac6b0e36a90378f847062f81d7e4 kernel.org
https://git.kernel.org/stable/c/b8278ff605187ef3fa0f2705e93251cce4c4f8ee kernel.org
https://git.kernel.org/stable/c/b88a511308779c225005d7994b8744561bdbafbc kernel.org
https://git.kernel.org/stable/c/cb6abc584a1bfab107ac003d64948a4aef1730aa kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

1 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-72126
NVD Published Date:
08/15/2026
NVD Last Modified:
08/15/2026
Source:
kernel.org