CVE-2026-23037

What it actually does

Failure to return success on partial RX URB allocation in es58x_alloc_rx_urbs causes es58x_open to skip the free_urbs cleanup path, leaking anchored USB request blocks and producing a memory leak in the etas_es58x CAN driver.

Why it matters to the business

Long-running systems using the affected ETAS ES58x hardware may experience gradual kernel memory exhaustion, leading to degraded performance or forced reboots; widespread Linux kernel usage increases exposure across automotive and industrial deployments.

How an attack unfolds

An attacker with local access triggers repeated device open/close operations under memory pressure that causes partial URB allocation; each failed full allocation leaks resources without cleanup, eventually exhausting memory and impacting system stability.

How to fix it

Update the Linux kernel to a version containing commit 97250eb05e4b6afe787290e8fd97d0675116c61b or later; rebuild and deploy the updated kernel image on all affected hosts.

How to confirm the fix worked

Confirm the running kernel contains commit 97250eb05e4b6afe787290e8fd97d0675116c61b by checking git log or kernel version string; exercise es58x_open under constrained memory to verify no URB leaks occur via kmemleak or slabinfo monitoring.

Typical attack path

1. Obtain local access or ability to open the CAN device node
2. Induce repeated es58x_open calls while free memory is low enough to produce partial URB allocation
3. Allow leaked URBs to accumulate until kernel memory pressure causes denial of service

How to detect it

Review kernel logs for repeated es58x_open failures coinciding with rising slab or URB allocation counts; inspect kmemleak reports or /proc/meminfo trends on systems with the etas_es58x module loaded.

What your security team should do

• Prioritize kernel upgrades on systems exposing the etas_es58x driver within the next maintenance window
• Monitor for kernel memory pressure indicators on hosts using ETAS ES58x hardware
• Apply the fix in all stable kernel branches used by production fleets