PT-2026-5508 · Linux+2 · Linux Kernel+2
Published
2025-01-01
·
Updated
2026-05-22
·
CVE-2025-71182
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the J1939 protocol. Specifically, the
j1939 session activate() function may succeed even after the network device has been unregistered via j1939 cancel active session(). This can occur because the check within j1939 session activate() is performed while holding the session list lock, which reliably closes a race condition window. The issue was initially reported by syzbot and a previous commit aimed to address it did not fully resolve the problem. The vulnerability can lead to issues when unregistering a network device, as indicated by the message "unregister netdevice: waiting for vcan0 to become free. Usage count = 2".Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu