CVE-2026-72228

Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primary_if leak on failed linearization If the skb has a frag_list, it must be linearized before it can be split using skb_split(). But when this step failed, it must not only free the skb but also take care of the reference to the already found primary_if.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-10-15

AI Q&A

2026-08-15

EPSS Evaluated

2026-10-13

NVD

CVE-2026-72228

EUVD

EUVD-2026-59127

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	a6a73781b460c4fe2cf2c40400ac91dfddb353fa
Linux	Linux	8f37aad74f46dd5d8b95fac17804b75f77931fa9
Linux	Linux	a063f2fba3fa633a599253b62561051ac185fa99
Linux	Linux	a063f2fba3fa633a599253b62561051ac185fa99
Linux	Linux	a063f2fba3fa633a599253b62561051ac185fa99
Linux	Linux	a063f2fba3fa633a599253b62561051ac185fa99
Linux	Linux	a063f2fba3fa633a599253b62561051ac185fa99
Linux	Linux	a063f2fba3fa633a599253b62561051ac185fa99
Linux	Linux	5ed837a7e05bcba72bdcd86b12547ea5b796cc01
Linux	Linux	5853618b022b8ed287a278540303e1b283d6f247
Linux	Linux	3915341a935f3397f65a01580dc3bfc4cdf53d14
Linux	Linux	bea410635595f8efbec90c948da04c3613ef87ea
Linux	Linux	5.10.117
Linux	Linux	5.15.41
Linux	Linux	4.14.280
Linux	Linux	4.19.244
Linux	Linux	5.4.195
Linux	Linux	5.17.9
Linux	Linux	5.18

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability in the batman-adv module where a reference to primary_if is not properly released when skb linearization fails during fragmentation handling. This could lead to a memory leak or resource exhaustion if exploited.

Detection Guidance

This vulnerability is specific to the Linux kernel's batman-adv module and involves a reference leak during packet fragmentation handling. Detection requires checking kernel logs for related errors or kernel crashes involving batman-adv. Commands like dmesg | grep batman-adv or journalctl -k | grep batman-adv may help identify issues.

Impact Analysis

If exploited, this could cause system instability due to resource leaks, potential denial of service, or unexpected behavior in network operations managed by batman-adv. It primarily affects systems running vulnerable Linux kernels with batman-adv enabled.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If updating is not immediately possible, consider disabling the batman-adv module if it is not essential to your network operations.

Hi! I’m here to help you understand CVE-2026-72228. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70