Strix
63.5K

CVE-2026-80707

HIGHCVSS 7.5/10EPSS 0.16%

Last modified

CVE-2026-80707 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Zero the allocated buffer in j1939_session_fresh_new() to ensure it contains no residual data. While there is a potential performance impact if users allocate maximum sized ETP buffers, most real-world use cases are not noticeably affected since the maximum known buffer size is typically around 65K. [mkl: add Message-ID]. EPSS estimates a 0.16% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Zero the allocated buffer in j1939_session_fresh_new() to ensure it contains no residual data. While there is a potential performance impact if users allocate maximum sized ETP buffers, most real-world use cases are not noticeably affected since the maximum known buffer size is typically around 65K. [mkl: add Message-ID]

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
0.16%

5.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 9d71dd0c70099914fcd063135da3c580865e924c, < 348818277a3646d5b9fa60c9d20c00dc4bc86832; >= 9d71dd0c70099914fcd063135da3c580865e924c, < f3e120a34b336079479fa10f706f0636eaa6e751; >= 9d71dd0c70099914fcd063135da3c580865e924c, < bbfa49d1e287de44994955b44d19281be3195b44; >= 9d71dd0c70099914fcd063135da3c580865e924c, < 194d67e92197eb820f4c2c6605d9721333b3eba0; >= 9d71dd0c70099914fcd063135da3c580865e924c, < 038bad8e16c2e28acf31f0b527a816fb23a57269; >= 9d71dd0c70099914fcd063135da3c580865e924c, < 8604a3b81b9d0ceaf04fee5f52e701f623a179f9; >= 9d71dd0c70099914fcd063135da3c580865e924c, < d5b3613c7d69d8dcb4dd6704f1f463198ce9f6cf; >= 9d71dd0c70099914fcd063135da3c580865e924c, < eb96c58907922546e415e545fe9a14ea63b02719
LinuxLinux5.4

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80707?
In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Zero the allocated buffer in j1939_session_fresh_new() to ensure it contains no residual data. While there is a potential performance impact if users allocate maximum sized ETP buffers, most real-world use cases are not noticeably affected since the maximum known buffer size is typically around 65K. [mkl: add Message-ID]
How severe is CVE-2026-80707?
CVE-2026-80707 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.16% probability of exploitation in the next 30 days.
How do I fix CVE-2026-80707?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80707?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST