Linux EUVD-2026-15295

The vulnerability resides in the Linux kernel's SocketCAN subsystem, specifically the f81604 CAN USB adapter driver (cpe:2.3:a:linux:linux). The f81604 is a USB-to-CAN interface device that communicates with the kernel via interrupt URBs. The root cause is improper input validation of interrupt URB message length before the driver processes the payload. Rather than explicitly validating that received interrupt messages conform to the expected protocol message size, the driver attempted to process variable-length or truncated URB data as if it were properly formatted, creating a classic buffer boundary violation scenario. This falls under improper input validation and lack of bounds checking—categories typically associated with CWE-20 (Improper Input Validation) or CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The vulnerability is triggered at the USB device driver level, where malformed interrupt transfers from a USB device are received without sufficient sanitization.