An uninitialized memory vulnerability in the Linux kernel CAN J1939 transport layer could allow an attacker to access residual data from kernel memory.

The vulnerability exists in the j1939_session_fresh_new function within the CAN J1939 transport implementation. Because the allocated receive buffer is not zeroed before use, it may contain residual data from previous kernel operations, which can be read by an unauthenticated attacker.

The potential for unauthorized information disclosure poses a significant security risk, as residual memory may contain sensitive kernel-space data. While the CVSS score of 7.5 indicates a high severity rating due to the ease of network-based exploitation, the actual impact is limited to the disclosure of memory contents rather than remote code execution or system-wide compromise.

Immediate Action: Update your Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.151, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unusual kernel-related errors or unexpected process behavior that may indicate attempts to probe or trigger memory-related faults.

Compensating Controls: Ensure that systems using the CAN J1939 protocol are logically segmented from untrusted network traffic to minimize the attack surface.

Public Exploit Available: Unknown

This vulnerability represents a high-risk information disclosure flaw that requires immediate attention for systems utilizing CAN J1939 networking. Administrators should prioritize patching the kernel to the versions specified above to eliminate the risk of residual memory exposure. Failure to apply these updates leaves the system susceptible to potential data leakage from the kernel memory space.