This vulnerability (CVE-2026-17523) exists in the Linux kernel's CAN BCM module (net/can/bcm.c), where an expired pointer dereference allows an unprivileged local user to execute arbitrary kernel code. This leads to local privilege escalation, enabling the attacker to gain root privileges and take full control of the affected system. The flaw is confirmed in Red Hat Enterprise Linux 8 with proof-of-concept exploits demonstrating local privilege escalation even without unprivileged user namespaces or kernel-modules-extra package. Red Hat's advisory suggests mitigating by blacklisting the bcm kernel module if not needed, as no official fix is currently stated. The vulnerability is scored 7.8 CVSS v3.1 (high severity) with low attack complexity and no user interaction required.

Successful exploitation allows an unprivileged local attacker to execute arbitrary code within the kernel, resulting in full root privilege escalation and complete system compromise. Confidentiality, integrity, and availability impacts are all high due to the ability to execute unauthorized code at the kernel level.

Red Hat currently does not provide an official patch or fix for this vulnerability. To mitigate the risk, administrators should prevent the bcm kernel module from loading if it is not required by creating a file named /etc/modprobe.d/blacklist-bcm.conf containing the line 'blacklist bcm' and then rebooting the system. This mitigation may impact functionality relying on the CAN BCM module. Users should monitor the Red Hat advisory for updates regarding official fixes or patches.