---
cve: "CVE-2026-80707"
severity: "HIGH"
cvss: 7.5
epss: "33%"
vendor: "Linux"
kev: false
exploited: false
published: "2026-08-28 08:16:56"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-19T10:28:23+02:00"
---

# CVE-2026-80707

> 7.5 HIGH

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer

Zero the allocated buffer in j1939_session_fresh_new() to ensure it
contains no residual data.

While there is a potential performance impact if users allocate maximum
sized ETP buffers, most real-world use cases are not noticeably affected
since the maximum known buffer size is typically around 65K.

[mkl: add Message-ID]

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Keine | good |
| A Verfügbarkeit | Keine | good |

## Patch verfügbar (OSV)

- Kernel ≥ 5.10.265
- Kernel ≥ 5.15.216
- Kernel ≥ 6.1.183
- Kernel ≥ 6.6.151
- Kernel ≥ 6.12.103
- Kernel ≥ 6.18.44
- Kernel ≥ 7.1.8

## Referenzen

- <https://git.kernel.org/stable/c/348818277a3646d5b9fa60c9d20c00dc4bc86832>
- <https://git.kernel.org/stable/c/f3e120a34b336079479fa10f706f0636eaa6e751>
- <https://git.kernel.org/stable/c/bbfa49d1e287de44994955b44d19281be3195b44>
- <https://git.kernel.org/stable/c/194d67e92197eb820f4c2c6605d9721333b3eba0>
- <https://git.kernel.org/stable/c/038bad8e16c2e28acf31f0b527a816fb23a57269>
- <https://git.kernel.org/stable/c/8604a3b81b9d0ceaf04fee5f52e701f623a179f9>
- <https://git.kernel.org/stable/c/d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cf>
- <https://git.kernel.org/stable/c/eb96c58907922546e415e545fe9a14ea63b02719>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-80707) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_