CVE-2025-71182

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the J1939 protocol. Specifically, the j1939 session activate() function may succeed even after the network device has been unregistered via j1939 cancel active session(). This can occur because the check within j1939 session activate() is performed while holding the session list lock, which reliably closes a race condition window. The issue was initially reported by syzbot and a previous commit aimed to address it did not fully resolve the problem. The vulnerability can lead to issues when unregistering a network device, as indicated by the message "unregister netdevice: waiting for vcan0 to become free. Usage count = 2".

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.