AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72235

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's batman-adv module, where improper handling of buffer reallocation can lead to a use-after-free condition for the Ethernet header. This flaw may compromise the integrity of traffic isolation features, specifically for the TT and AP isolation handling. System administrators and developers utilizing the batman-adv module in their Linux environments should prioritize addressing this issue to mitigate potential exploitation risks.

CVE
CVE-2026-72235
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the VLAN header but missed for the ethernet header which is later used for the TT and AP isolation handling.