Linux Kernel J1939 NETDEV_UNREGISTER Notification Handler Vulnerability

Vulnerability

A vulnerability in the Linux kernel's J1939 protocol handling has been addressed. The issue arose because the J1939 protocol lacked a NETDEV_UNREGISTER notification handler to reverse changes made by the j1939_sk_bind() function. This omission led to a situation where the usage count of a network device could not be properly decremented, causing unregister_netdevice() to hang. The vulnerability was resolved by implementing a NETDEV_UNREGISTER handler that correctly manages the reference counts, allowing the network device to be unregistered without issues.

Impact

The vulnerability could cause the unregister_netdevice() function to hang, waiting for a network device to become free, which could disrupt normal network operations.

Added: Oct 1, 2025, 8:20 AM
Updated: Oct 1, 2025, 8:20 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
0.6
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.