01 Record

CVE-2026-74459

can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.7% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-08-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-15 12:27Z2 MO AGO

Last updated

2026-08-19 16:36Z2 MO AGO

Reserved

2026-08-15

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

74d2777a6925894597ad522471e7e277a9ba38e2a7444907ca616ba635ad3358

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7a0171b4921ad443fee5ed4fcb9d99fa4776edac to < c7ddf119544eea2d8409e12471c3f9f36ca02e3f, 2185ea6e4ebcb61d1224dc7d187c59723cb5ad59 to < 21da1a374769751546cc131e58a4d8bd968f57b2, f6e90c113c92e83fc0963d5e60e16b0e8a268981 to < 0ef136ba052101243ba117a1aca6f4a4c3a81142, b878444519fa03a3edd287d1963cf79ef78be2f1 to < b85e5c310382803d27adf6fe6554d4208bc8951c, 18eee279e9b5bff0db1aca9475ae4bc12804f05c to < c311f17c261fd375ddf5755f2ebe1f022c19c5b0, 5eaad4f768266f1f17e01232ffe2ef009f8129b7 to < 19c6c8c6cd5dd14fab5fcd744584812a57cbb78d, 5eaad4f768266f1f17e01232ffe2ef009f8129b7 to < 7a0cf2b2497c757c3cb1286eddf2986abb0d387b, b8f9ca88253574638bcff38900a4c28d570b1919, 5.15.203 to < 5.15.216, 6.1.167 to < 6.1.183, 6.6.130 to < 6.6.151, 6.12.77 to < 6.12.103, 6.18.17 to < 6.18.44, 6.19.7 to < 6.20, 7.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/c7ddf119544eea2d8409e12471c3f9f36ca02e3f
git.kernel.orghttps://git.kernel.org/stable/c/21da1a374769751546cc131e58a4d8bd968f57b2
git.kernel.orghttps://git.kernel.org/stable/c/0ef136ba052101243ba117a1aca6f4a4c3a81142
git.kernel.orghttps://git.kernel.org/stable/c/b85e5c310382803d27adf6fe6554d4208bc8951c
git.kernel.orghttps://git.kernel.org/stable/c/c311f17c261fd375ddf5755f2ebe1f022c19c5b0
git.kernel.orghttps://git.kernel.org/stable/c/19c6c8c6cd5dd14fab5fcd744584812a57cbb78d
git.kernel.orghttps://git.kernel.org/stable/c/7a0cf2b2497c757c3cb1286eddf2986abb0d387b

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.105-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.