High 7.8Published Jul 27, 2026

CVE-2026-17523can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

Updated under an hour ago (Oct 27, 2026, 6:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet This patch switches the timer to HRTIMER_MODE_SOFT, which executed the timer callback in softirq context and removes the hrtimer_tasklet.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: redhat
NVD analysis: Undergoing Analysis
Record last updated: Sep 10, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c53a6ee88b0a91bd012ef1b7988c0b93dae6f24d before 79305a826f872fe446c6fbf8450f515053ef6951; from c53a6ee88b0a91bd012ef1b7988c0b93dae6f24d before bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.29.1 before 4.19.226; from 4.20 before 5.4; 2.6.29; 2.6.29; 2.6.29; 2.6.29; 2.6.29; 2.6.29; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/79305a826f872fe446c6fbf8450f515053ef6951	patch
https://git.kernel.org/stable/c/bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.