CVE-2026-72235

Received Received - Intake

Use-After-Free in Linux Kernel batman-adv Module

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the VLAN header but missed for the ethernet header which is later used for the TT and AP isolation handling.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72235

EUVD

EUVD-2026-59134

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a use-after-free issue in the batman-adv module. When processing received packets, the function pskb_may_pull() may reallocate the buffer behind the socket buffer (skb). While the code correctly reassigns pointers for the VLAN header, it fails to do so for the ethernet header. This oversight can lead to the ethernet header pointing to freed memory, causing a use-after-free vulnerability.

Detection Guidance

This vulnerability is specific to the Linux kernel's batman-adv module. Detection requires checking if your system uses a vulnerable kernel version. Inspect loaded kernel modules with lsmod | grep batman_adv and check kernel version with uname -a. If vulnerable, update the kernel immediately.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service on systems running vulnerable versions of the Linux kernel with the batman-adv module enabled. Systems using batman-adv for mesh networking are particularly at risk if they process specially crafted network packets.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is specific to the Linux kernel's batman-adv module and involves a use-after-free issue in network packet handling.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this batman-adv issue. Disable the batman-adv module if not in use. Monitor vendor advisories for kernel updates addressing this CVE.

Hi! I’m here to help you understand CVE-2026-72235. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70