SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80601

HIGH · CVSS 8.8 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's batman-adv module, specifically in the handling of Ethernet headers during buffer reallocation. This flaw can lead to a use-after-free condition, potentially allowing an attacker to execute arbitrary code or cause a denial of service. System administrators and developers utilizing the batman-adv module should prioritize applying patches to mitigate this risk.

CVE
CVE-2026-80601
Severity
HIGH
CVSS
8.8
EPSS
0.26%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.