A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service. CREATE(Triage):(User=admin) CVE-2023-2166 (https://nvd.nist.gov/vuln/detail/CVE-2023-2166)
