Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15

Description: The issue is related to a use-after-free (UAF) bug in the j1939 netdev start() function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and fixed in version v5.15. The actual impact and attack plausibility have not yet been proven.

Recommendations: For Linux Kernel versions prior to v5.15, update to version v5.15 or later to resolve the issue. As a temporary workaround, consider disabling the j1939 netdev start() function until a patch is available. Restrict access to the j1939 priv module to minimize the risk of exploitation. Avoid using the rx kref variable in the affected function until the issue is resolved.