The peak_usb driver in the Linux kernel fails to validate the length of uCAN receive records before copying them into kernel buffers. This oversight allows a malicious CAN USB message to overflow a buffer and corrupt kernel memory, potentially enabling arbitrary code execution within kernel space. The flaw is a classic buffer overflow (CWE-805) and the impact is limited to the kernel, not user processes unless the attacker escalates privileges.

All Linux kernel builds that do not contain the patch added by commit 2427ef427bdd78d862c7c76597bfd9eda88b81f1 are affected. Systems that use CAN USB adapters supported by the peak_usb driver are at risk. No specific release versions are listed, so any kernel prior to inclusion of the patch should be considered vulnerable.

The CVSS score of 5.5 classifies this as a moderate severity flaw. The EPSS score of less than 1% indicates a very low likelihood of exploitation at the time of analysis, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need local or physical control of the CAN USB interface to inject malformed messages; there is no documented remote exploitation path. If exploited, the resulting memory corruption could allow escalation of privileges to kernel level.