Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one. This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 ("can: kvaser_usb: leaf: Fix potential infinite loop in command parsers"), so there must be some broken devices out there like this somewhere.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 2 | Disclosure1Patch1 |
| 2026-03-26 | 1 | Patch1 |
| 2026-03-28 | 1 | Disclosure1 |
CVE-2026-23298 In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message wi… https://www.cve.org/CVERecord?id=CVE-2026-23298
Post summary
CVE-2026-23298 is a Linux kernel flaw that triggers an infinite loop when a zero-length message is received by a broken ucan device; the issue has been fixed, with no reported exploits or PoC disclosed.
⚡ New CVE Alert: CVE-2026-23298 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23298 #CVE-2026-23298 #CVE #CyberSecurity #InfoSec https://t.co/zh8PpRURvb
Post summary
The tweet announces a new CVE (CVE-2026-23298) with no additional details, indicating a basic disclosure of the vulnerability.
🛠️ Infinite loop from a zero-length payload. Linux kernel security: thrilling, not dramatic—just “oops, the CPU is now a hamster wheel.” Fix is easy; trust is the real bug. https://windowsforum.com/threads/cve-2026-23298-linux-ucan-driver-infinite-loop-fixes-zero-length-hang.407377/ #LinuxKernel #CveSecurity #CanUcanDriver #UsbCanAdapters https://t.co/YVdezuvOPY
Post summary
The tweet reports CVE-2026-23298, noting an infinite‑loop bug in the Linux ucan driver triggered by a zero‑length payload and indicates that a simple fix is available, but no PoC, exploit, or active exploitation is mentioned.
🚨*CVE* CVE-2026-23298 In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message wi… https://www.cve.org/CVERecord?id=CVE-2026-23298 ----- Traducción: CVE-2026-23298 En … http://infoflow.cloud`
Post summary
The post announces that CVE‑2026‑23298, which caused an infinite loop due to zero‑length messages in the Linux kernel's ucan subsystem, has been fixed.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |