Description
The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-26lenny2 | DSA-2153-1 |
| Debian 5.0 | user-mode-linux | 2.6.26-1um-2+26lenny2 | DSA-2153-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +13 | 2.6.32-71.29.1.el6 | RHSA-2011:0498 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | perf +10 | 2.6.33.7-rt29.55.el5rt | RHSA-2011:0330 |
Advisories 3
- RHSA-2011:0498 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2153-1 linux-2.6 - several issues Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2011:0330 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jan 14, 2026
References
- [oss-security] 20101220 CVE request: kernel: CAN information leak, 2nd attempt mailing-list
- [netdev] 20101102 Re: [SECURITY] CAN info leak/minor heap overflow mailing-list
- [netdev] 20101109 Re: [PATCH] Fix CAN info leak/minor heap overflow mailing-list
- [oss-security] 20101220 Re: CVE request: kernel: CAN information leak, 2nd attempt mailing-list
- [oss-security] 20101104 Re: CVE request: kernel: CAN information leak mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=664544
- [netdev] 20101110 Re: [PATCH] Fix CAN info leak/minor heap overflow mailing-list
- [netdev] 20101102 [SECURITY] CAN info leak/minor heap overflow mailing-list
- 44661 vdb-entry
- MDVSA-2011:029 vendor-advisory
- [oss-security] 20101103 CVE request: kernel: CAN information leak mailing-list