The Linux kernel fix tracked as CVE‑2025‑39925 addresses a race/reference-counting bug in the CAN J1939 protocol stack: the subsystem lacked a NETDEV_UNREGISTER notification handler to undo an extra reference held by j1939_sk_bind, which could leave a virtual CAN device (for example vcan0) stuck...