CVE-2026-72227
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests header Before the access to struct batadv_tvlv_mcast_tracker's num_dests, it is attempted to check whether enough space is actually in the network header. But instead of using offsetofend() to check for the whole size (2) which must be accessible, offsetof() of is called. The latter is always returning 0. The comparison with the network header length will always return that enough data is available - even when only 1 or 0 bytes are accessible. Instead of using offsetofend(), use the more common check for the whole header.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72227
EUVD
EUVD-2026-59126

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel's batman-adv multicast (mcast) component. It involves an out-of-bounds (OOB) read issue where the code incorrectly checks the available space in a network header before accessing a structure field. The check uses offsetof() instead of offsetofend(), causing it to always pass even when insufficient data is present.

Detection Guidance

This vulnerability is specific to the Linux kernel's batman-adv module and involves an out-of-bounds (OOB) read in multicast tracking. Detection requires checking kernel logs for related errors or crashes, particularly in batman-adv module operations. Use commands like dmesg | grep batman-adv or journalctl -k | grep batman-adv to inspect kernel logs for anomalies.

Impact Analysis

This vulnerability could allow an attacker on the same network to potentially read sensitive memory contents or cause system instability by triggering an OOB read. It primarily affects systems using the batman-adv protocol for mesh networking.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a patched version where this issue is resolved. Check your distribution's security updates or kernel patches. If using a custom kernel, apply the upstream fix for batman-adv multicast tracking. Disable the batman-adv module temporarily if updates are not immediately available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72227. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart