CVE-2022-49845

In the Linux kernel, the following vulnerability has been resolved:

can: j1939: j1939_send_one(): fix missing CAN header initialization

The read access to struct canxl_frame::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame.

This patch initializes the 8 byte CAN header with zero.

This vulnerability is rated as having a Moderate severity because exploitation requires local access to create CAN J1939 sockets, restricting the blast radius to a localized denial of service rather than remote code execution. The CAN SAE J1939 protocol subsystem is not loaded or used by default in typical Red Hat Enterprise Linux environments. Consequently, systems are only exposed if CAN networking interfaces and J1939 sockets are actively configured and utilized.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.