8.8

CVE-2026-72233

batman-adv: bla: reacquire gw address after skb realloc

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: bla: reacquire gw address after skb realloc

The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate
the buffer behind the skb. Variables which were pointing to the old buffer
need to be reassigned to avoid an use-after-free.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Version < 41819c5467b6eb8ab4567f0ac98702ce9b6abbb1
Status affected
Version 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Version < a9ab19fbca86b32e9a9ae9e1a63e70a7eab3400f
Status affected
Version 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Version < 4a6673c55752a7aa41e28f51660eb981504ca088
Status affected
Version 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Version < ab2bac47a02637df1128a151e81d3ec14767f4bb
Status affected
Version 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Version < dc16bbf53cede1baf564bf0c8a861114b64e18b3
Status affected
Version 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Version < e5e18886aadd3870e2d84e32a9678317fab1dd9e
Status affected
Version 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Version < f4fb97ecf677cd9c3aa4f3bfc6fbf5b0e4bdbbbf
Status affected
Version 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Version < cdf3b5af2bc4431e58629e8ad2086b1e9185c761
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.12
Status affected
Version 0
Version < 4.12
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.269
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/41819c5467b6eb8ab4567f0ac98702ce9b6abbb1
https://git.kernel.org/stable/c/a9ab19fbca86b32e9a9ae9e1a63e70a7eab3400f
https://git.kernel.org/stable/c/4a6673c55752a7aa41e28f51660eb981504ca088
https://git.kernel.org/stable/c/ab2bac47a02637df1128a151e81d3ec14767f4bb
https://git.kernel.org/stable/c/dc16bbf53cede1baf564bf0c8a861114b64e18b3
https://git.kernel.org/stable/c/e5e18886aadd3870e2d84e32a9678317fab1dd9e
https://git.kernel.org/stable/c/f4fb97ecf677cd9c3aa4f3bfc6fbf5b0e4bdbbbf
https://git.kernel.org/stable/c/cdf3b5af2bc4431e58629e8ad2086b1e9185c761