{"id":"CVE-2026-80707","title":"can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ncan: j1939: transport: j1939_session_fresh_new(): initialize receive buffer\n\nZero the allocated buffer in j1939_session_fresh_new() to ensure it\ncontains no residual da…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < 348818277a3646d5b9fa60c9d20c00dc4bc86832","Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < f3e120a34b336079479fa10f706f0636eaa6e751","Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < bbfa49d1e287de44994955b44d19281be3195b44","Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < 194d67e92197eb820f4c2c6605d9721333b3eba0","Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < 038bad8e16c2e28acf31f0b527a816fb23a57269","Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < 8604a3b81b9d0ceaf04fee5f52e701f623a179f9","Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cf","Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < eb96c58907922546e415e545fe9a14ea63b02719","Linux 5.4"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-16T19:20:28.838708Z"},"published":"2026-08-28","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:26:34.357Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80707","references":[{"url":"https://git.kernel.org/stable/c/348818277a3646d5b9fa60c9d20c00dc4bc86832"},{"url":"https://git.kernel.org/stable/c/f3e120a34b336079479fa10f706f0636eaa6e751"},{"url":"https://git.kernel.org/stable/c/bbfa49d1e287de44994955b44d19281be3195b44"},{"url":"https://git.kernel.org/stable/c/194d67e92197eb820f4c2c6605d9721333b3eba0"},{"url":"https://git.kernel.org/stable/c/038bad8e16c2e28acf31f0b527a816fb23a57269"},{"url":"https://git.kernel.org/stable/c/8604a3b81b9d0ceaf04fee5f52e701f623a179f9"},{"url":"https://git.kernel.org/stable/c/d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cf"},{"url":"https://git.kernel.org/stable/c/eb96c58907922546e415e545fe9a14ea63b02719"}],"tags":["cve.org"],"epss":0.00329,"epssPercentile":0.24466,"ingestedAt":"2026-10-16T19:46:24.305Z","slug":"CVE-2026-80707","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncan: j1939: transport: j1939_session_fresh_new(): initialize receive buffer\n\nZero the allocated buffer in j1939_session_fresh_new() to ensure it\ncontains no residual data.\n\nWhile there is a potential performance impact if users allocate maximum\nsized ETP buffers, most real-world use cases are not noticeably affected\nsince the maximum known buffer size is typically around 65K.\n\n[mkl: add Message-ID]\n\n## Affected\n\n- `Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < 348818277a3646d5b9fa60c9d20c00dc4bc86832`\n- `Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < f3e120a34b336079479fa10f706f0636eaa6e751`\n- `Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < bbfa49d1e287de44994955b44d19281be3195b44`\n- `Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < 194d67e92197eb820f4c2c6605d9721333b3eba0`\n- `Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < 038bad8e16c2e28acf31f0b527a816fb23a57269`\n- `Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < 8604a3b81b9d0ceaf04fee5f52e701f623a179f9`\n- `Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cf`\n- `Linux >= 9d71dd0c70099914fcd063135da3c580865e924c < eb96c58907922546e415e545fe9a14ea63b02719`\n- `Linux 5.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}