8.8

CVE-2026-72235

batman-adv: retrieve ethhdr after potential skb realloc on RX

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: retrieve ethhdr after potential skb realloc on RX

pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind
the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an use-after-free.

This was done correctly for the VLAN header but missed for the ethernet
header which is later used for the TT and AP isolation handling.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Version < 6e189f14d1ea28db212b9d70a02131a7ce518012
Status affected
Version c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Version < a1820344b180cb55af748f102bc536b5c93164db
Status affected
Version c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Version < 6abf73589bed3f27ee240c08108feb72bed0b9c6
Status affected
Version c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Version < f19259395b44af67f3c274e34237c295b526b859
Status affected
Version c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Version < 2cefa5141cab8ec1e4b24cf585958b13f2e3049d
Status affected
Version c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Version < 85a71a81854e0e191ad0e533eabb4eff54866feb
Status affected
Version c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Version < b031fc97e1993d29d6c3a0e86a99140528cf31e8
Status affected
Version c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Version < 035e1fed892d3d06002a73ff73668f618a514644
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.38
Status affected
Version 0
Version < 2.6.38
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.269
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/6e189f14d1ea28db212b9d70a02131a7ce518012
https://git.kernel.org/stable/c/a1820344b180cb55af748f102bc536b5c93164db
https://git.kernel.org/stable/c/6abf73589bed3f27ee240c08108feb72bed0b9c6
https://git.kernel.org/stable/c/f19259395b44af67f3c274e34237c295b526b859
https://git.kernel.org/stable/c/2cefa5141cab8ec1e4b24cf585958b13f2e3049d
https://git.kernel.org/stable/c/85a71a81854e0e191ad0e533eabb4eff54866feb
https://git.kernel.org/stable/c/b031fc97e1993d29d6c3a0e86a99140528cf31e8
https://git.kernel.org/stable/c/035e1fed892d3d06002a73ff73668f618a514644