AZL-78479
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-78479.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-78479
- Upstream
- Published
- 2026-01-25T15:15:54Z
- Modified
- 2026-04-01T05:23:15.262385Z
- Summary
- CVE-2026-22997 affecting package kernel for versions less than 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: can: j1939: j1939xtprxrtssession_active(): deactivate session upon receiving the second rts
Since j1939sessiondeactivateactivatenext() in j1939tprxtimer() is called only when the timer is enabled, we need to call j1939sessiondeactivateactivatenext() if we cancelled the timer. Otherwise, refcount for j1939_session leaks, which will later appear as
| unregister_netdevice: waiting for vcan0 to become free. Usage count = 2.
problem.
- References