CVE-2026-72234
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the ethernet header but missed for the unicast_packet pointer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72234
EUVD
EUVD-2026-59133

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a use-after-free issue in the batman-adv protocol. The pskb_may_pull() function may reallocate the buffer for an skb (socket buffer), but the unicast_packet pointer was not reassigned after this reallocation. This leads to accessing freed memory, causing a use-after-free vulnerability.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by triggering the use-after-free condition. It may lead to system crashes or unauthorized access if exploited.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the batman-adv use-after-free vulnerability. Monitor kernel security advisories for patches addressing this issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72234. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart