CVE-2026-72235

A flaw was found in the Linux kernel batman-adv component. The batadvinterfacerx function, responsible for handling network packets, can reallocate its internal buffer. However, a pointer to the ethernet header is not correctly updated after this reallocation. This oversight leads to a...

CVE-2026-72234

A flaw was found in the Linux kernel's batman-adv module. When the pskbmaypull function is called by batadvgetvid, it can reallocate a buffer. However, a pointer to the old buffer, specifically unicastpacket, was not correctly reassigned, leading to a use-after-free condition. This memory...

CVE-2026-72233

A flaw was found in the batman-adv component of the Linux kernel. This vulnerability occurs when a buffer is reallocated, but existing pointers are not updated, leading to a use-after-free condition. A local attacker could potentially exploit this to cause a system crash denial of service or, in...

CVE-2026-72232

A flaw was found in the batman-adv component of the Linux kernel. A local user with extended Berkeley Packet Filter eBPF traffic control TC hook access could exploit this by attaching a TC filter that truncates a packet and redirects it to a batman-adv interface. The batadvinterfacetx function th...

CVE-2026-72229

A flaw was found in the batman-adv component of the Linux kernel. When a mesh interface is registered, an untagged VLAN object is created. If the network device netdev registration fails due to a veto, the cleanup process does not properly free this object. This can lead to a memory leak,...

CVE-2026-72228

A flaw was found in the batman-adv component of the Linux kernel. This vulnerability occurs during the processing of network packets that have fragmented data. Specifically, if a packet's fragmented data fails a preparation step called linearization, a reference to a network interface primaryif i...

CVE-2026-72227

A flaw was found in the Linux kernel's batman-adv component. An out-of-bounds read vulnerability exists in the mcast module due to an incorrect size check when accessing the numdests header. This flaw could allow an attacker to read sensitive information from memory or cause a denial of service...

CVE-2026-72226

A flaw was found in the Linux kernel's batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced module. An integer overflow can occur when calculating the length of a Translation Table Type-Length-Value TVLV unicast message. This overflow can lead to invalid safety checks, allowing an...

CVE-2026-72230

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced fragmentation module of the Linux kernel. The batadvfragsendpacket function, responsible for sending fragmented packets, does not properly free allocated memory when a packet is deemed unfragmentable due to ...

CVE-2026-72231

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking module of the Linux kernel. An incorrect check during the handling of TT Topology Table requests can prevent the proper cleanup of request nodes when send buffer allocation fails. This can lead to a remote attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-72227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: mcast: avoid OOB read of numdests header Before the access to struct batadvtvlvmcasttracker's numdests, it is attempted to check whether enough spac...

Linux Distros Unpatched Vulnerability : CVE-2026-72231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This...

Linux Distros Unpatched Vulnerability : CVE-2026-72233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull called by batadvblaisbackbonegw could reallocate the buffer behind the skb. Variables...

Linux Distros Unpatched Vulnerability : CVE-2026-72235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: retrieve ethhdr after potential skb realloc on RX pskbmaypull in batadvinterfacerx could reallocate the buffer behind the skb. Variables which were...

Linux Distros Unpatched Vulnerability : CVE-2026-72228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: frag: fix primaryif leak on failed linearization If the skb has a fraglist, it must be linearized before it can be split using skbsplit. But when th...

Linux Distros Unpatched Vulnerability : CVE-2026-72230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the...

Linux Distros Unpatched Vulnerability : CVE-2026-72229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it creates an untagged struct batadvmeshifvlan on top of it...

Linux Distros Unpatched Vulnerability : CVE-2026-72226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. This number is an u16 and gets multiplied by the si...

Linux Distros Unpatched Vulnerability : CVE-2026-72232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 net: bridge: xmit: make sure we have at least eth header len bytes, it is...

Linux Distros Unpatched Vulnerability : CVE-2026-72234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: access unicastttvn skb-data only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables whic...