CVE-2026-22997

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-22997
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Since j1939_session_deactivate_activate_next() in j1939_tp_rxtimer() is called only when the timer is enabled, we need to call j1939_session_deactivate_activate_next() if we cancelled the timer. Otherwise, refcount for j1939_session leaks, which will later appear as | unregister_netdevice: waiting for vcan0 to become free. Usage count = 2. problem.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1809c82aa073a11b7d335ae932d81ce51a588a4a Patch
https://git.kernel.org/stable/c/6121b7564c725b632ffe4764abe85aa239d37703 Patch
https://git.kernel.org/stable/c/809a437e27a3bf3c1c6c8c157773635552116f2b Patch
https://git.kernel.org/stable/c/a73e7d7e346dae1c22dc3e95b02ca464b12daf2c Patch
https://git.kernel.org/stable/c/adabf01c19561e42899da9de56a6a1da0e6b8a5b Patch
https://git.kernel.org/stable/c/b1d67607e97d489c0cfbbf55f48a76b00710b0e4 Patch
https://git.kernel.org/stable/c/cb2a610867bc379988bae0bb4b8bbc59c0decf1a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
History

26 Feb 2026, 17:01

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/1809c82aa073a11b7d335ae932d81ce51a588a4a - () https://git.kernel.org/stable/c/1809c82aa073a11b7d335ae932d81ce51a588a4a - Patch
References () https://git.kernel.org/stable/c/6121b7564c725b632ffe4764abe85aa239d37703 - () https://git.kernel.org/stable/c/6121b7564c725b632ffe4764abe85aa239d37703 - Patch
References () https://git.kernel.org/stable/c/809a437e27a3bf3c1c6c8c157773635552116f2b - () https://git.kernel.org/stable/c/809a437e27a3bf3c1c6c8c157773635552116f2b - Patch
References () https://git.kernel.org/stable/c/a73e7d7e346dae1c22dc3e95b02ca464b12daf2c - () https://git.kernel.org/stable/c/a73e7d7e346dae1c22dc3e95b02ca464b12daf2c - Patch
References () https://git.kernel.org/stable/c/adabf01c19561e42899da9de56a6a1da0e6b8a5b - () https://git.kernel.org/stable/c/adabf01c19561e42899da9de56a6a1da0e6b8a5b - Patch
References () https://git.kernel.org/stable/c/b1d67607e97d489c0cfbbf55f48a76b00710b0e4 - () https://git.kernel.org/stable/c/b1d67607e97d489c0cfbbf55f48a76b00710b0e4 - Patch
References () https://git.kernel.org/stable/c/cb2a610867bc379988bae0bb4b8bbc59c0decf1a - () https://git.kernel.org/stable/c/cb2a610867bc379988bae0bb4b8bbc59c0decf1a - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

06 Feb 2026, 17:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/a73e7d7e346dae1c22dc3e95b02ca464b12daf2c -
  • () https://git.kernel.org/stable/c/adabf01c19561e42899da9de56a6a1da0e6b8a5b -
  • () https://git.kernel.org/stable/c/b1d67607e97d489c0cfbbf55f48a76b00710b0e4 -

30 Jan 2026, 10:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/809a437e27a3bf3c1c6c8c157773635552116f2b -

25 Jan 2026, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-25 15:15

Updated : 2026-02-26 17:01

NVD link : CVE-2026-22997

Mitre link : CVE-2026-22997

CVE.ORG link : CVE-2026-22997

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo