CVE-2026-80889

A flaw was found in the Controller Area Network (CAN) ISO-TP (ISO 15765-2 Transport Protocol) module of the Linux kernel. This vulnerability arises from improper handling of timer operations, state transitions, and generation tracking within the module. A local attacker could potentially exploit these synchronization issues to cause instability or unresponsiveness in the CAN ISO-TP module, leading to a denial of service.

This vulnerability is rated as Moderate severity because exploitation requires local access and results primarily in a denial of service through kernel instability or task hangs, without compromising system confidentiality or integrity. In standard Red Hat Enterprise Linux deployments, the CAN ISO 15765-2 transport protocol subsystem is not actively utilized, which restricts the practical exposure primarily to environments utilizing CAN networking. Additionally, older enterprise releases such as Red Hat Enterprise Linux 7 and 8 do not contain the vulnerable code and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.