---
id: CVE-2026-17523
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

  This patch switches the timer to HRTIMER_MODE_SOFT, which executed the
  timer callback in softirq…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

  This patch switches the timer to HRTIMER_MODE_SOFT, which executed the
  timer callback in softirq…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c53a6ee88b0a91bd012ef1b7988c0b93dae6f24d <
    79305a826f872fe446c6fbf8450f515053ef6951
  - >-
    Linux >= c53a6ee88b0a91bd012ef1b7988c0b93dae6f24d <
    bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68
  - Linux 2.6.29
published: '2026-07-27'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T14:17:00.323'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-17523'
references:
  - url: 'https://git.kernel.org/stable/c/79305a826f872fe446c6fbf8450f515053ef6951'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-07-27T13:44:24.567768Z'
epss: 0.00146
epssPercentile: 0.03192
ingestedAt: '2026-09-09T08:04:11.992Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

This patch switches the timer to HRTIMER_MODE_SOFT, which executed the
timer callback in softirq context and removes the hrtimer_tasklet.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.