In the Linux kernel, the following vulnerability has been resolved:
can: j1939: j1939_send_one(): fix missing CAN header initialization
The read access to struct canxl_frame::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame.
This patch initializes the 8 byte CAN header with zero.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-modulesUpgrade kernel-rtUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64kUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-develUpgrade perfUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-64k-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-develUpgrade kernel-debug | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jun 23, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | May 1, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-tools-libsUpgrade libperfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade rvUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perf | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-raspi-5.4Upgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-raspiUpgrade linuxUpgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-ibm-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15Upgrade linux-nvidiaUpgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-azure-5.15Upgrade linux-iotUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-realtimeUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-gcp-5.15Upgrade linux-gcp-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-hwe-5.4Upgrade linux-intel-iotgUpgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-ibm | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub