CVE-2026-80707

can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer

State: Published
Severity: 7.5 High
Published: Aug 28, 2026
Updated: Oct 16, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer

Zero the allocated buffer in j1939_session_fresh_new() to ensure it contains no residual data.

While there is a potential performance impact if users allocate maximum sized ETP buffers, most real-world use cases are not noticeably affected since the maximum known buffer size is typically around 65K.

[mkl: add Message-ID]

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9d71dd0c70099914fcd063135da3c580865e924c to before 348818277a3646d5b9fa60c9d20c00dc4bc86832Affected 9d71dd0c70099914fcd063135da3c580865e924c to before f3e120a34b336079479fa10f706f0636eaa6e751Affected 9d71dd0c70099914fcd063135da3c580865e924c to before bbfa49d1e287de44994955b44d19281be3195b44Affected 9d71dd0c70099914fcd063135da3c580865e924c to before 194d67e92197eb820f4c2c6605d9721333b3eba0Affected 9d71dd0c70099914fcd063135da3c580865e924c to before 038bad8e16c2e28acf31f0b527a816fb23a57269Affected 9d71dd0c70099914fcd063135da3c580865e924c to before 8604a3b81b9d0ceaf04fee5f52e701f623a179f9Affected 9d71dd0c70099914fcd063135da3c580865e924c to before d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cfAffected 9d71dd0c70099914fcd063135da3c580865e924c to before eb96c58907922546e415e545fe9a14ea63b02719Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.151 through 6.6.Not affected 6.12.103 through 6.12.Not affected 6.18.44 through 6.18.Not affected 7.1.8 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

9d71dd0c70099914fcd063135da3c580865e924c to before 348818277a3646d5b9fa60c9d20c00dc4bc86832Affected
9d71dd0c70099914fcd063135da3c580865e924c to before f3e120a34b336079479fa10f706f0636eaa6e751Affected
9d71dd0c70099914fcd063135da3c580865e924c to before bbfa49d1e287de44994955b44d19281be3195b44Affected
9d71dd0c70099914fcd063135da3c580865e924c to before 194d67e92197eb820f4c2c6605d9721333b3eba0Affected
9d71dd0c70099914fcd063135da3c580865e924c to before 038bad8e16c2e28acf31f0b527a816fb23a57269Affected
9d71dd0c70099914fcd063135da3c580865e924c to before 8604a3b81b9d0ceaf04fee5f52e701f623a179f9Affected
9d71dd0c70099914fcd063135da3c580865e924c to before d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cfAffected
9d71dd0c70099914fcd063135da3c580865e924c to before eb96c58907922546e415e545fe9a14ea63b02719Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.151 through 6.6.*Not affected
6.12.103 through 6.12.*Not affected
6.18.44 through 6.18.*Not affected
7.1.8 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.