CVE-2022-49269: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49269 affects the Linux kernel's CAN (Controller Area Network) ISO-TP protocol implementation. The vulnerability was discovered in the isotp_bind() function where improper validation of CAN ID checks could lead to a state machine status that should not be reachable with a compliant CAN ID address configuration (NVD, Kernel Commit).

The issue occurs in the isotp_bind() function where CAN ID values were not properly sanitized before performing address checks. The vulnerability was triggered when using address information consisting of CAN ID 0x6000001 and 0xC28001, which both resolve to 11-bit CAN IDs 0x001 in sending and receiving operations. The fix involves sanitizing the SFF/EFF CAN ID values by properly masking them with CAN_EFF_FLAG and CAN_EFF_MASK or CAN_SFF_MASK depending on the ID type (Kernel Commit).

The vulnerability could allow an attacker to create invalid state machine conditions in the CAN ISO-TP protocol implementation, potentially affecting the reliability and security of CAN bus communications in affected systems (NVD).

The vulnerability was discovered by Syzbot, a kernel fuzzing tool, which created an environment that triggered the invalid state. The issue requires the ability to interact with the CAN bus subsystem and send specifically crafted CAN ID values (Kernel Commit).

The vulnerability has been fixed in the Linux kernel through a patch that properly sanitizes CAN ID values in the isotp_bind() function. Users should update to a kernel version that includes the fix (Kernel Commit).