Linux Kernel Vulnerability Affecting CAN ISOTP Implementation

CVE-2026-80889

What is CVE-2026-80889?

The Linux kernel contains a vulnerability within the CAN ISOTP implementation that impacts the proper handling of timer drain order, wakeup handling, and the ordering of transmission generation. A series of patches have addressed multiple issues, ensuring that the transmission state transitions are properly managed to avoid stale callbacks, incorrect shutdown handling, and the risk of that multiple threads interfering with concurrent operations. Specific changes include enhancements to the processing of send operations, ensuring state consistency, and management of errors, enhancing the overall reliability and security of CAN network communications.

References