CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's implementation of the J1939 transport protocol, specifically in the j1939_session_fresh_new() function, which fails to properly initialize the receive buffer, potentially exposing residual data. While this could lead to information leakage, the performance impact is minimal for most users, as typical buffer sizes are around 65K. Organizations utilizing the Linux kernel in automotive or industrial applications should prioritize addressing this issue to mitigate any risks associated with data exposure.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Zero the allocated buffer in j1939_session_fresh_new() to ensure it contains no residual data. While there is a potential performance impact if users allocate maximum sized ETP buffers, most real-world use cases are not noticeably affected since the maximum known buffer size is typically around 65K. [mkl: add Message-ID]