CVE-2026-72235
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
batman-adv: retrieve ethhdr after potential skb realloc on RX
In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the VLAN header but missed for the ethernet header which is later used for the TT and AP isolation handling.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| c6c8fea29769d998d94fcec9b9f14d4b52b349d3 | affected | git | 6e189f14d1ea28db212b9d70a02131a7ce518012 | Unavailable | None listed |
| c6c8fea29769d998d94fcec9b9f14d4b52b349d3 | affected | git | a1820344b180cb55af748f102bc536b5c93164db | Unavailable | None listed |
| c6c8fea29769d998d94fcec9b9f14d4b52b349d3 | affected | git | 6abf73589bed3f27ee240c08108feb72bed0b9c6 | Unavailable | None listed |
| c6c8fea29769d998d94fcec9b9f14d4b52b349d3 | affected | git | f19259395b44af67f3c274e34237c295b526b859 | Unavailable | None listed |
| c6c8fea29769d998d94fcec9b9f14d4b52b349d3 | affected | git | 2cefa5141cab8ec1e4b24cf585958b13f2e3049d | Unavailable | None listed |
| c6c8fea29769d998d94fcec9b9f14d4b52b349d3 | affected | git | 85a71a81854e0e191ad0e533eabb4eff54866feb | Unavailable | None listed |
| c6c8fea29769d998d94fcec9b9f14d4b52b349d3 | affected | git | b031fc97e1993d29d6c3a0e86a99140528cf31e8 | Unavailable | None listed |
| c6c8fea29769d998d94fcec9b9f14d4b52b349d3 | affected | git | 035e1fed892d3d06002a73ff73668f618a514644 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.38 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.38 | Unavailable | None listed |
| 5.10.261 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.212 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.178 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.145 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.97 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.40 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.1.5 | unaffected | semver | Unavailable | 7.1.* | None listed |
| 7.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |