The patch modifies the Broadcom CAN driver to switch the timer to HRTIMER_MODE_SOFT, executing the timer callback in softirq context and removing the hrtimer_tasklet. The change does not describe a specific flaw; it reflects a modification to how the driver schedules its timer callbacks.

All Linux kernel builds that include the Broadcom CAN driver code before the commit that switches the timer mode are affected. Vendors providing community‑based kernels are relevant. Specific version numbers are not listed, so any kernel containing the older BCM driver before the fix could be impacted.

The CVSS score of 7.8 indicates a medium‑to‑high severity issue, while the EPSS score of less than 1% suggests a very low probability of active exploitation. The vulnerability is not listed in CISA KEV. No publicly documented attack vector is provided; exploitation would likely require kernel or privileged access to influence the modified timer behavior. The precise impact remains theoretical until a concrete exploitation scenario emerges.