CVE-2022-49845: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_send_one(): fix missing CAN header initialization The read access to struct canxl_frame::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame. This patch initializes the 8 byte CAN header with zero.

Affected products

• Linux Linux Kernel: from 5.4, before 5.4.225 (fixed in 5.4.225); from 5.5, before 5.10.155 (fixed in 5.10.155); from 5.11, before 5.15.79 (fixed in 5.15.79); from 5.16, before 6.0.9 (fixed in 6.0.9); version 6.1 only

Published 2025-05-01. Last modified 2026-06-17.