BaseFortify

Publication date: 2026-01-25

Last updated on: 2026-04-27

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Since j1939_session_deactivate_activate_next() in j1939_tp_rxtimer() is called only when the timer is enabled, we need to call j1939_session_deactivate_activate_next() if we cancelled the timer. Otherwise, refcount for j1939_session leaks, which will later appear as | unregister_netdevice: waiting for vcan0 to become free. Usage count = 2. problem.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-25

Last Modified

2026-04-27

Generated

2026-07-06

AI Q&A

2026-01-25

EPSS Evaluated

2026-07-05

NVD

CVE-2026-22997

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.7 (exc)
linux	linux_kernel	6.19
linux	linux_kernel	6.19
linux	linux_kernel	6.19
linux	linux_kernel	6.19
linux	linux_kernel	6.19
linux	linux_kernel	From 5.11 (inc) to 5.15.199 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.162 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.122 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.67 (exc)
linux	linux_kernel	From 5.4 (inc) to 5.10.249 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's CAN J1939 protocol stack involves improper session deactivation. Specifically, the function j1939_session_deactivate_activate_next() is not called when a timer is cancelled, leading to a reference count leak for j1939_session. This causes the system to hang while waiting for a network device (like vcan0) to become free, due to the usage count not decrementing properly.

Impact Analysis

The vulnerability can cause resource leaks in the Linux kernel's network stack, leading to network devices not being properly released. This can result in system instability or denial of service conditions where network interfaces remain busy and unavailable.

Hi! I’m here to help you understand CVE-2026-22997. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70