How to ensure all nodes on CAN bus have received the message
If by &quot;received&quot; you mean &quot;the CAN controller accepted it and passed it on to the software&quot; - this is provided for by the workings of the protocol.
If any receiver (or indeed the transmitter) notices an error in the message on the bus (for example some framing issue, a bit stuff error, or the CRC doesn't match etc.) then it will create an error frame, and no-one will accept the message - and it will then be retransmitted automatically by the transmitter who sent it. So, even if there was some bizarre noise affecting only one small part of the bus, if even one receiver spots an error, everyone will throw the message away. Note that this even occurs if the node spotting the error is not configured to accept the particular ID - this filtering happens only after the message is accepted by the lower level hardware.
The exception to this would be if the node that notices the error has gone into an Error Passive state - due to seeing too many errors.  In this case, its error frame would include a &quot;Passive Error Flag&quot;(which is only made of recessive bits, so no-one sees it!). In this case, the other nodes (which did not see the error) would not be notified of this.
This is done to stop nodes with bad connections (for example) stopping the whole bus working.  It is a corner case, when something else has already gone wrong, but is worth considering if your system is critical and you wish to consider the case of multiple independent failures.