AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72234

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's batman-adv module, where improper handling of the skb buffer during a reallocation can lead to a use-after-free condition. This could potentially allow an attacker to execute arbitrary code or cause a denial of service by manipulating unicast packet data. System administrators and developers utilizing the batman-adv module in their Linux environments should prioritize applying patches to mitigate this risk.

CVE
CVE-2026-72234
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the ethernet header but missed for the unicast_packet pointer.