CVE-2026-80707

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where the j1939 session fresh new() function fails to zero the allocated receive buffer, potentially allowing it to contain residual data. This affects the CAN J1939 transport protocol. While allocating maximum sized ETP (Extended Transport Protocol) buffers may cause a performance impact, most typical use cases with buffer sizes around 65K are not significantly affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.