CVE-2026-80707

can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer

HIGH
7.5
CVSS Score
Published: August 28, 2026 at 06:53 AM UTC
Updated: October 16, 2026 at 08:18 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Zero the allocated buffer in j1939_session_fresh_new() to ensure it contains no residual data. While there is a potential performance impact if users allocate maximum sized ETP buffers, most real-world use cases are not noticeably affected since the maximum known buffer size is typically around 65K. [mkl: add Message-ID]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.49d71dd0c70099914fcd063135da3c580865e924c
Vendor states this is fixed in 038bad8e16c2e28acf31f0b527a816fb23a57269 (fixed)
Vendor states this is fixed in 194d67e92197eb820f4c2c6605d9721333b3eba0 (fixed)
Vendor states this is fixed in 348818277a3646d5b9fa60c9d20c00dc4bc86832 (fixed)
Vendor states this is fixed in 8604a3b81b9d0ceaf04fee5f52e701f623a179f9 (fixed)
Vendor states this is fixed in bbfa49d1e287de44994955b44d19281be3195b44 (fixed)
Vendor states this is fixed in d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cf (fixed)
Vendor states this is fixed in eb96c58907922546e415e545fe9a14ea63b02719 (fixed)
Vendor states this is fixed in f3e120a34b336079479fa10f706f0636eaa6e751 (fixed)
Vendor states this is fixed in 5.10.265 (unaffected)
Vendor states this is fixed in 5.15.216 (unaffected)
Vendor states this is fixed in 5.4 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.103 (unaffected)
Vendor states this is fixed in 6.18.44 (unaffected)
Vendor states this is fixed in 6.6.151 (unaffected)
Vendor states this is fixed in 7.1.8 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card