[PATCH net 0/19] pull-request: can 2026-07-16

[Marc Kleine-Budde <mkl@pengutronix.de>]

Hello netdev-team,

this is a pull request of 19 patches for net/main.

The first patch is by Alexander Hölzl and fixes the Kconfig
description of the vxcan driver.

Next patch by Fan Wu fixes the tear down order in the esd_usb driver.

Followed by a patch by Oliver Hartkopp that adds missing locking for
the raw flags in the CAN_RAW protocol.

Shuhao Fu's patch for the j1939 protocol fix lockless
local-destination check.

Stéphane Grosjean updates their email address.

The next 11 patches all target the CAM Broadcast Manager protocol. One
contributed by Lee Jones the remaining ones by Oliver Hartkopp. They
fix several concurrency and locking issues found by various bots.

The last 3 patches are also by Oliver Hartkopp fixing concurrency and
locking issues found by various bots in the CAN ISO Transport
Protocol.

regards,
Marc

---

The following changes since commit 3f1f755366687d051174739fb99f7d560202f60b:

  net: openvswitch: reject oversized nested action attrs (2026-07-11 13:09:11 +0200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can.git tags/linux-can-fixes-for-7.2-20260716

for you to fetch changes up to 6fd9e37916b9537143a295f854fdf5e52c4c5bc1:

  Merge patch series "net: can: isotp-fixes" (2026-07-16 10:12:22 +0200)

----------------------------------------------------------------
linux-can-fixes-for-7.2-20260716

----------------------------------------------------------------
Alexander Hölzl (1):
      can: vxcan: Kconfig: fix description stating no local echo provided

Fan Wu (1):
      can: esd_usb: kill anchored URBs before freeing netdevs

Lee Jones (1):
      can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF

Marc Kleine-Budde (2):
      Merge patch series "can: bcm: collected fixes"
      Merge patch series "net: can: isotp-fixes"

Oliver Hartkopp (14):
      can: raw: add locking for raw flags bitfield
      can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
      can: bcm: add locking when updating filter and timer values
      can: bcm: fix CAN frame rx/tx statistics
      can: bcm: add missing rcu list annotations and operations
      can: bcm: extend bcm_tx_lock usage for data and timer updates
      can: bcm: validate frame length in bcm_rx_setup() for RTR replies
      can: bcm: add missing device refcount for CAN filter removal
      can: bcm: fix stale rx/tx ops after device removal
      can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()
      can: bcm: track a single source interface for ANYDEV timeout/throttle ops
      can: isotp: use unconditional synchronize_rcu() in isotp_release()
      can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
      can: isotp: serialize TX state transitions under so->rx_lock

Shuhao Fu (1):
      can: j1939: fix lockless local-destination check

Stéphane Grosjean (1):
      can: peak: Modification of references to email accounts being deleted

 .mailmap                                      |   4 +-
 drivers/net/can/Kconfig                       |   7 +-
 drivers/net/can/peak_canfd/peak_canfd.c       |   2 +-
 drivers/net/can/peak_canfd/peak_canfd_user.h  |   2 +-
 drivers/net/can/peak_canfd/peak_pciefd_main.c |   4 +-
 drivers/net/can/sja1000/peak_pci.c            |   4 +-
 drivers/net/can/sja1000/peak_pcmcia.c         |   4 +-
 drivers/net/can/usb/esd_usb.c                 |   5 +-
 drivers/net/can/usb/peak_usb/pcan_usb.c       |   2 +-
 drivers/net/can/usb/peak_usb/pcan_usb_core.c  |   4 +-
 drivers/net/can/usb/peak_usb/pcan_usb_core.h  |   2 +-
 drivers/net/can/usb/peak_usb/pcan_usb_fd.c    |   2 +-
 drivers/net/can/usb/peak_usb/pcan_usb_pro.c   |   2 +-
 drivers/net/can/usb/peak_usb/pcan_usb_pro.h   |   2 +-
 include/linux/can/dev/peak_canfd.h            |   2 +-
 net/can/bcm.c                                 | 654 +++++++++++++++++++-------
 net/can/isotp.c                               | 298 +++++++++---
 net/can/j1939/transport.c                     |  18 +-
 net/can/raw.c                                 |  66 ++-
 19 files changed, 792 insertions(+), 292 deletions(-)