CVE-2026-80707

CVE-2026-80707 affects the Linux kernel CAN J1939 transport module. The root cause is that j1939_session_fresh_new() did not initialize (zero) its allocated receive buffer, potentially leaving residual data in memory. The fix zeroes the buffer after allocation. A minor performance impact is noted...