7.5

CVE-2026-80707

can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer

In the Linux kernel, the following vulnerability has been resolved:

can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer

Zero the allocated buffer in j1939_session_fresh_new() to ensure it
contains no residual data.

While there is a potential performance impact if users allocate maximum
sized ETP buffers, most real-world use cases are not noticeably affected
since the maximum known buffer size is typically around 65K.

[mkl: add Message-ID]
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 9d71dd0c70099914fcd063135da3c580865e924c
Version < 348818277a3646d5b9fa60c9d20c00dc4bc86832
Status affected
Version 9d71dd0c70099914fcd063135da3c580865e924c
Version < f3e120a34b336079479fa10f706f0636eaa6e751
Status affected
Version 9d71dd0c70099914fcd063135da3c580865e924c
Version < bbfa49d1e287de44994955b44d19281be3195b44
Status affected
Version 9d71dd0c70099914fcd063135da3c580865e924c
Version < 194d67e92197eb820f4c2c6605d9721333b3eba0
Status affected
Version 9d71dd0c70099914fcd063135da3c580865e924c
Version < 038bad8e16c2e28acf31f0b527a816fb23a57269
Status affected
Version 9d71dd0c70099914fcd063135da3c580865e924c
Version < 8604a3b81b9d0ceaf04fee5f52e701f623a179f9
Status affected
Version 9d71dd0c70099914fcd063135da3c580865e924c
Version < d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cf
Status affected
Version 9d71dd0c70099914fcd063135da3c580865e924c
Version < eb96c58907922546e415e545fe9a14ea63b02719
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.4
Status affected
Version 0
Version < 5.4
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.253
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/348818277a3646d5b9fa60c9d20c00dc4bc86832
https://git.kernel.org/stable/c/f3e120a34b336079479fa10f706f0636eaa6e751
https://git.kernel.org/stable/c/bbfa49d1e287de44994955b44d19281be3195b44
https://git.kernel.org/stable/c/194d67e92197eb820f4c2c6605d9721333b3eba0
https://git.kernel.org/stable/c/038bad8e16c2e28acf31f0b527a816fb23a57269
https://git.kernel.org/stable/c/8604a3b81b9d0ceaf04fee5f52e701f623a179f9
https://git.kernel.org/stable/c/d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cf
https://git.kernel.org/stable/c/eb96c58907922546e415e545fe9a14ea63b02719