CVE-2022-49845 Details
Description
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_send_one(): fix missing CAN header initialization The read access to struct canxl_frame::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame. This patch initializes the 8 byte CAN header with zero.
A vulnerability in the Linux kernel's J1939 implementation has been addressed, concerning the 'j1939_send_one()' function. The issue involved a missing initialization of the CAN header in a J1939-created socket buffer, which left certain elements uninitialized. This vulnerability could potentially lead to undefined behavior by exposing read access to an improperly initialized CAN frame structure. The patch corrects this by ensuring the 8-byte CAN header is properly initialized to zero.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2719f82ad5d8199cf5f346ea8bb3998ad5323b72 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3eb3d283e8579a22b81dd2ac3987b77465b2a22f | kernel.org | Patch |
| https://git.kernel.org/stable/c/69e86c6268d59ceddd0abe9ae8f1f5296f316c3c | kernel.org | Patch |
| https://git.kernel.org/stable/c/d0513b095e1ef1469718564dec3fb3348556d0a8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f8e0edeaa0f2b860bdbbf0aafb4492533043d650 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-908 | Use of Uninitialized Resource | [email protected] |
| CWE-908 | Use of Uninitialized Resource | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.4, < 5.4.225 >= 5.5, < 5.10.155 >= 5.11, < 5.15.79 >= 5.16, < 6.0.9 6.1 rc1 6.1 rc2 6.1 rc3 6.1 rc4 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 1, 2025 | CVE Modified | CISA-ADP |
| May 7, 2025 | Initial Analysis | [email protected] |
| May 1, 2025 | New CVE Received | kernel.org |