PT-2026-83007 · Linux · Linux

CVE-2026-80707

·

Published

2026-08-28

·

Updated

2026-08-28

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In the Linux kernel, the following vulnerability has been resolved:
can: j1939: transport: j1939 session fresh new(): initialize receive buffer
Zero the allocated buffer in j1939 session fresh new() to ensure it contains no residual data.
While there is a potential performance impact if users allocate maximum sized ETP buffers, most real-world use cases are not noticeably affected since the maximum known buffer size is typically around 65K.
[mkl: add Message-ID]

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-80707

Affected Products

Linux