CVE-2022-2741 can: denial-of-service can be triggered by a crafted CAN frame

High 8.2 Published 31 Oct 2022 Updated 5 May 2025

An attacker on the CAN network can cause a denial of service in Zephyr RTOS by sending a crafted CAN frame with mismatched RTR bits.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-2741?

CVE-2022-2741 is a high-severity denial of service vulnerability in Zephyrproject Zephyr, published on 31 Oct 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node (this can easily be guessed based on CAN traffic analyses). The frame must contain the opposite RTR bit as what the filter installed in the vulnerable node contains (if the filter matches RTR frames, the frame must be a data frame or vice versa).

Weakness: CWE-400

Which versions are affected by CVE-2022-2741?

It affects 1 product.

Products include Zephyrproject Zephyr.

How do I fix CVE-2022-2741?

No fix has been published for CVE-2022-2741 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2022-2741 being exploited?

There is no known exploitation of CVE-2022-2741 in the wild and no public exploit code.

All Zephyrproject Zephyr vulnerabilities

Sources

Also known as GHSA-hx5v-j59q-c3j8.