---
id: CVE-2026-17523
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

  This patch switches the timer to HRTIMER_MODE_SOFT, which executed the
  timer callback in softirq…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

  This patch switches the timer to HRTIMER_MODE_SOFT, which executed the
  timer callback in softirq…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 2.6.29.1, < 4.19.226'
  - 'linux_kernel >= 4.20, < 5.4'
  - linux_kernel = 2.6.29
patched:
  - linux_kernel 5.4
published: '2026-07-27'
updated: '2026-10-02'
sourceUpdated: '2026-10-02T15:12:08.460'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-17523'
references:
  - url: 'https://git.kernel.org/stable/c/79305a826f872fe446c6fbf8450f515053ef6951'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00165
epssPercentile: 0.05674
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-07-27T13:44:24.567768Z'
ingestedAt: '2026-09-09T08:04:11.992Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

This patch switches the timer to HRTIMER_MODE_SOFT, which executed the
timer callback in softirq context and removes the hrtimer_tasklet.

## Affected

- `linux_kernel >= 2.6.29.1, < 4.19.226`
- `linux_kernel >= 4.20, < 5.4`
- `linux_kernel = 2.6.29`

## Remediation

Upgrade past the affected range:

- `linux_kernel 5.4`