SB2026020269 - Improper locking in Linux kernel can j1939
Published: February 2, 2026
Security Bulletin ID
SB2026020269
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2025-71182)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the j1939_session_activate() function in net/can/j1939/transport.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/46ca9dc978923c5e1247a9e9519240ba7ace413c
- https://git.kernel.org/stable/c/5d5602236f5db19e8b337a2cd87a90ace5ea776d
- https://git.kernel.org/stable/c/78d87b72cebe2a993fd5b017e9f14fb6278f2eae
- https://git.kernel.org/stable/c/79dd3f1d9dd310c2af89b09c71f34d93973b200f
- https://git.kernel.org/stable/c/ba6f0d1832eeb5eb3a6dc5cb30e0f720b3cb3536
- https://git.kernel.org/stable/c/c3a4316e3c746af415c0fd6c6d489ad13f53714d
- https://git.kernel.org/stable/c/ebb0dfd718dd31c8d3600612ca4b7207ec3d923a