In the Linux kernel, the following vulnerability has been resolved:
can: j1939: j1939_send_one(): fix missing CAN header initialization
The read access to struct canxl_frame::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame.
This patch initializes the 8 byte CAN header with zero.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-rt-64k-debugUpgrade perfUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-develUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-64kUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-devel-matched | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.155-138.670Upgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Jun 23, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | May 1, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-lowlatencyUpgrade linux-azure-fdeUpgrade linuxUpgrade linux-oracle-5.4Upgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linux-gkeUpgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.15Upgrade linux-gcpUpgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-xilinx-zynqmpUpgrade linux-realtimeUpgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-5.4Upgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-iotUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-azure-fips | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub