CVE-2026-72232

Received Received - Intake

batman-adv Ethernet Header Length Validation Flaw

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 ("net: bridge: xmit: make sure we have at least eth header len bytes"), it is possible by for a local user with eBPF TC hook access to attach a tc filter which truncates the packet and redirects to an batadv interface. But the code assumes that at least ETH_HLEN bytes are available and thus might read outside of the available buffer. The batadv_interface_tx() must therefore always check itself if enough data is available for the ethernet header and don't rely on min_header_len.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72232

EUVD

EUVD-2026-59131

Affected Vendors & Products

Vendor	Product	Version / Range
batman-adv	batman-adv	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the batman-adv module. A local user with eBPF TC hook access can attach a tc filter that truncates packets and redirects them to a batadv interface. The code assumes at least ETH_HLEN bytes are available but may read outside the buffer if insufficient data exists.

Detection Guidance

This vulnerability can be detected by checking if the batman-adv kernel module is loaded and inspecting network traffic for truncated packets. Use 'lsmod | grep batman_adv' to verify if the module is loaded. Monitor network interfaces with 'tcpdump -i any -n -e' for unusual packet truncation. Check kernel logs with 'dmesg | grep batman' for errors related to buffer overreads.

Impact Analysis

An attacker with local access could exploit this to cause a buffer overflow, potentially leading to system crashes, data corruption, or privilege escalation. Systems using batman-adv with eBPF TC hooks are at risk.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a local privilege escalation risk in the Linux kernel's batman-adv module. Compliance impacts would depend on specific implementations and deployment contexts rather than the vulnerability itself.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the batman-adv vulnerability. Ensure eBPF TC hook filters are properly configured to prevent packet truncation. Monitor network interfaces for unusual activity or crashes.

Hi! I’m here to help you understand CVE-2026-72232. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70