CVE-2026-80707

A flaw was found in the Linux kernel's J1939 CAN bus transport module. When a new session's receive buffer is allocated, it is not properly initialized, which can leave residual data from previous memory usage. A local attacker could potentially exploit this to read sensitive information from the...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: Use skdstget and dstdevrcu in getnetdevforsock. CVE-2025-40149 In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize CVE-2025-68792 In the...

CVE-2022-49845

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939sendone: fix missing CAN header initialization The read access to struct canxlframe::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct canframe...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtprxrtssessionnew CVE-2023-52887 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: use timestam...

DEBIAN-CVE-2021-47232

In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while in use This patch fixes a Use-after-Free found by the syzbot. The problem is that a skb is taken from the per-session skb queue, without incrementing the ref count. This leads to...