Linux Kernel J1939 CAN Header Initialization Vulnerability

A vulnerability in the Linux kernel's J1939 implementation has been addressed, concerning the 'j1939_send_one()' function. The issue involved a missing initialization of the CAN header in a J1939-created socket buffer, which left certain elements uninitialized. This vulnerability could potentially lead to undefined behavior by exposing read access to an improperly initialized CAN frame structure. The patch corrects this by ensuring the 8-byte CAN header is properly initialized to zero.

Impact

The vulnerability could lead to undefined behavior due to the read access of an uninitialized CAN frame, potentially allowing for exploitation through the J1939 protocol.