CVE-2022-2741 - CVE House
Back to Database
Status published High CVE-2022-2741

can: denial-of-service can be triggered by a crafted CAN frame

Vulnerability Description

The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node (this can easily be guessed based on CAN traffic analyses). The frame must contain the opposite RTR bit as what the filter installed in the vulnerable node contains (if the filter matches RTR frames, the frame must be a data frame or vice versa).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2741

Credits & Attribution

No credits recorded in the NVD database.

References

More from zephyrproject-rtos

View All →
CVE-2025-9558
Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start
High 7.6
CVE-2025-9557
Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont
High 7.6
CVE-2025-9408
Userspace privilege escalation vulnerability on Cortex M
High 8.2
CVE-2025-7403
Bluetooth: bt_conn_tx_processor unsafe handling
High 7.6
CVE-2025-2962
Infinite loop in dns_copy_qname
High 8.2

Affected Vendor

zephyrproject-rtos

View all reports →

Affected Software

zephyr
Vulnerable Versions:
unspecified

Timeline

Official Publish: October 31st, 2022
Last Modified: May 5th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Weaknesses (CWE)

CWE-400

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact