CVE-2025-71182

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-71182
In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939_session_activate() fail if device is no longer registered syzbot is still reporting unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 even after commit 93a27b5891b8 ("can: j1939: add missing calls in NETDEV_UNREGISTER notification handler") was added. A debug printk() patch found that j1939_session_activate() can succeed even after j1939_cancel_active_session() from j1939_netdev_notify(NETDEV_UNREGISTER) has completed. Since j1939_cancel_active_session() is processed with the session list lock held, checking ndev->reg_state in j1939_session_activate() with the session list lock held can reliably close the race window.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/46ca9dc978923c5e1247a9e9519240ba7ace413c Patch
https://git.kernel.org/stable/c/5d5602236f5db19e8b337a2cd87a90ace5ea776d Patch
https://git.kernel.org/stable/c/78d87b72cebe2a993fd5b017e9f14fb6278f2eae Patch
https://git.kernel.org/stable/c/79dd3f1d9dd310c2af89b09c71f34d93973b200f Patch
https://git.kernel.org/stable/c/ba6f0d1832eeb5eb3a6dc5cb30e0f720b3cb3536 Patch
https://git.kernel.org/stable/c/c3a4316e3c746af415c0fd6c6d489ad13f53714d Patch
https://git.kernel.org/stable/c/ebb0dfd718dd31c8d3600612ca4b7207ec3d923a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
History

25 Mar 2026, 19:41

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/46ca9dc978923c5e1247a9e9519240ba7ace413c - () https://git.kernel.org/stable/c/46ca9dc978923c5e1247a9e9519240ba7ace413c - Patch
References () https://git.kernel.org/stable/c/5d5602236f5db19e8b337a2cd87a90ace5ea776d - () https://git.kernel.org/stable/c/5d5602236f5db19e8b337a2cd87a90ace5ea776d - Patch
References () https://git.kernel.org/stable/c/78d87b72cebe2a993fd5b017e9f14fb6278f2eae - () https://git.kernel.org/stable/c/78d87b72cebe2a993fd5b017e9f14fb6278f2eae - Patch
References () https://git.kernel.org/stable/c/79dd3f1d9dd310c2af89b09c71f34d93973b200f - () https://git.kernel.org/stable/c/79dd3f1d9dd310c2af89b09c71f34d93973b200f - Patch
References () https://git.kernel.org/stable/c/ba6f0d1832eeb5eb3a6dc5cb30e0f720b3cb3536 - () https://git.kernel.org/stable/c/ba6f0d1832eeb5eb3a6dc5cb30e0f720b3cb3536 - Patch
References () https://git.kernel.org/stable/c/c3a4316e3c746af415c0fd6c6d489ad13f53714d - () https://git.kernel.org/stable/c/c3a4316e3c746af415c0fd6c6d489ad13f53714d - Patch
References () https://git.kernel.org/stable/c/ebb0dfd718dd31c8d3600612ca4b7207ec3d923a - () https://git.kernel.org/stable/c/ebb0dfd718dd31c8d3600612ca4b7207ec3d923a - Patch
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: can: j1939: hacer que j1939_session_activate() falle si el dispositivo ya no está registrado syzbot sigue reportando unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 incluso después de que el commit 93a27b5891b8 ('can: j1939: añadir llamadas faltantes en el manejador de notificaciones NETDEV_UNREGISTER') fue añadido. Un parche de depuración printk() encontró que j1939_session_activate() puede tener éxito incluso después de que j1939_cancel_active_session() de j1939_netdev_notify(NETDEV_UNREGISTER) se haya completado. Dado que j1939_cancel_active_session() se procesa con el bloqueo de la lista de sesiones mantenido, verificar ndev->reg_state en j1939_session_activate() con el bloqueo de la lista de sesiones mantenido puede cerrar de forma fiable la ventana de carrera.

31 Jan 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-31 12:16

Updated : 2026-03-25 19:41

NVD link : CVE-2025-71182

Mitre link : CVE-2025-71182

CVE.ORG link : CVE-2025-71182

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo