{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-72120",
        "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "state": "PUBLISHED",
        "assignerShortName": "Linux",
        "dateReserved": "2026-08-09T03:40:39.907Z",
        "datePublished": "2026-08-15T05:52:59.226Z",
        "dateUpdated": "2026-08-15T05:52:59.226Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
                "shortName": "Linux",
                "dateUpdated": "2026-08-15T05:52:59.226Z"
            },
            "descriptions": [
                {
                    "lang": "en",
                    "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: add missing rcu list annotations and operations\n\nsashiko-bot remarked the missing use of list_add_rcu() in\nbcm_[rx|tx]_setup() to have a proper initialized bcm_op structure\nwhen bcm_proc_show() traverses the bcm_op's under rcu_read_lock().\n\nTo cover all initial settings of the bcm_op's the list_add_rcu() calls\nare moved to the end of the setup code.\n\nWhile at it, also fix the mirroring removal side: bcm_release() called\nbcm_remove_op() - which frees the op via call_rcu() - on ops that were\nstill linked in bo->tx_ops/bo->rx_ops, without list_del_rcu() first.\nUnlink each op with list_del_rcu() before handing it to bcm_remove_op(),\nmatching the existing pattern in bcm_delete_tx_op()/bcm_delete_rx_op()."
                }
            ],
            "affected": [
                {
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "net/can/bcm.c"
                    ],
                    "versions": [
                        {
                            "version": "659701c0b954ccdb4a916a4ad59bbc16e726d42c",
                            "lessThan": "8357255e56dc1aaa437e3c53ee9385de984e0d57",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "0622846db728a5332b917c797c733e202c4620ae",
                            "lessThan": "8e1c7257c81577130f5ce90f69b2a2c3ce63f957",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "6d7d458c41b98a5c1670cbd36f2923c37de51cf5",
                            "lessThan": "eb1c26eab4d1f0b4450439b4b88c3e73faf1da98",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "1f912f8484e9c4396378c39460bbea0af681f319",
                            "lessThan": "f53bdab85e64eb57d6899a30d1307fd5a3639cc7",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "63567ecd99a24495208dc860d50fb17440043006",
                            "lessThan": "4e22e8b505f877573bbdfdbcb680babad9b2f7a1",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
                            "lessThan": "b06a4a397ac826603f39875cb7c7819a41365196",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
                            "lessThan": "30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
                            "lessThan": "7b2c3eabc4dafc062a25e10711154f2107526a78",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "19f553a1ddf260da6570ed8f8d91a8c87f49b63a",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "7c9db92d5f0eadca30884af75c53d601edc512ee",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "5.10.238",
                            "lessThan": "5.10.261",
                            "status": "affected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.15.185",
                            "lessThan": "5.15.212",
                            "status": "affected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.1.141",
                            "lessThan": "6.1.178",
                            "status": "affected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.6.93",
                            "lessThan": "6.6.145",
                            "status": "affected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.12.31",
                            "lessThan": "6.12.97",
                            "status": "affected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.4.294",
                            "lessThan": "5.5",
                            "status": "affected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.14.9",
                            "lessThan": "6.15",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                },
                {
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "net/can/bcm.c"
                    ],
                    "versions": [
                        {
                            "version": "6.15",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "6.15",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.10.261",
                            "lessThanOrEqual": "5.10.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.15.212",
                            "lessThanOrEqual": "5.15.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.1.178",
                            "lessThanOrEqual": "6.1.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.6.145",
                            "lessThanOrEqual": "6.6.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.12.97",
                            "lessThanOrEqual": "6.12.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.18.40",
                            "lessThanOrEqual": "6.18.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.1.5",
                            "lessThanOrEqual": "7.1.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.2-rc4",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }
            ],
            "cpeApplicability": [
                {
                    "nodes": [
                        {
                            "operator": "OR",
                            "negate": false,
                            "cpeMatch": [
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "5.10.238",
                                    "versionEndExcluding": "5.10.261"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "5.15.185",
                                    "versionEndExcluding": "5.15.212"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "6.1.141",
                                    "versionEndExcluding": "6.1.178"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "6.6.93",
                                    "versionEndExcluding": "6.6.145"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "6.12.31",
                                    "versionEndExcluding": "6.12.97"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "6.15",
                                    "versionEndExcluding": "6.18.40"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "6.15",
                                    "versionEndExcluding": "7.1.5"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "6.15",
                                    "versionEndExcluding": "7.2-rc4"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "5.4.294"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "6.14.9"
                                }
                            ]
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://git.kernel.org/stable/c/8357255e56dc1aaa437e3c53ee9385de984e0d57"
                },
                {
                    "url": "https://git.kernel.org/stable/c/8e1c7257c81577130f5ce90f69b2a2c3ce63f957"
                },
                {
                    "url": "https://git.kernel.org/stable/c/eb1c26eab4d1f0b4450439b4b88c3e73faf1da98"
                },
                {
                    "url": "https://git.kernel.org/stable/c/f53bdab85e64eb57d6899a30d1307fd5a3639cc7"
                },
                {
                    "url": "https://git.kernel.org/stable/c/4e22e8b505f877573bbdfdbcb680babad9b2f7a1"
                },
                {
                    "url": "https://git.kernel.org/stable/c/b06a4a397ac826603f39875cb7c7819a41365196"
                },
                {
                    "url": "https://git.kernel.org/stable/c/30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d"
                },
                {
                    "url": "https://git.kernel.org/stable/c/7b2c3eabc4dafc062a25e10711154f2107526a78"
                }
            ],
            "title": "can: bcm: add missing rcu list annotations and operations",
            "x_generator": {
                "engine": "bippy-1.2.0"
            }
        }
    }
}