Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel <6.6.152.1-1 can expose leftover buffer data
published 2 months ago
Summary
Older Linux kernel versions do not clear a temporary storage area when setting up certain communications, so leftover information could be read by other programs. This could let an attacker see data that should have been discarded, though it rarely affects performance. Install the kernel update that is version 6.6.152.1-1 or newer to resolve the issue.
What to do
- Update kernel to version 6.6.152.1-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel | <= 6.6.150.1-1 |
| Azure Linux:3 | – | kernel |
< 6.6.152.1-1 Fix: upgrade to 6.6.152.1-1
|
Original advisory text
CVE-2026-80707 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved:
can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
Zero the allocated buffer in j1939_session_fresh_new() to ensure it
contains no residual data.
While there is a potential performance impact if users allocate maximum
sized ETP buffers, most real-world use cases are not noticeably affected
since the maximum known buffer size is typically around 65K.
[mkl: add Message-ID]
can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
Zero the allocated buffer in j1939_session_fresh_new() to ensure it
contains no residual data.
While there is a potential performance impact if users allocate maximum
sized ETP buffers, most real-world use cases are not noticeably affected
since the maximum known buffer size is typically around 65K.
[mkl: add Message-ID]
References
Timeline
Published28 Aug 2026
Updated2 Oct 2026
First seen29 Aug 2026
Sources
AZL-98108 · OSV
Track software like this
Free during beta