CVE-2026-72228

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: frag: fix primary_if leak on failed linearization

If the skb has a frag_list, it must be linearized before it can be split using skb_split(). But when this step failed, it must not only free the skb but also take care of the reference to the already found primary_if.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a6a73781b460c4fe2cf2c40400ac91dfddb353fa, < e59b1960f71521ce4eb4397c4e82f5285601ab57; >= 8f37aad74f46dd5d8b95fac17804b75f77931fa9, < c1b28432fd6345e0d2308f39c507ed5750c265d2; >= a063f2fba3fa633a599253b62561051ac185fa99, < 4f3bf293f7662500142234ae6f23725953690bc9; >= a063f2fba3fa633a599253b62561051ac185fa99, < d2148aeee93197ccf821114489775132f28eebf5; >= a063f2fba3fa633a599253b62561051ac185fa99, < db3c700826e8126fbdaa83468a9c4ee4ee65319f; >= a063f2fba3fa633a599253b62561051ac185fa99, < a90f4fff9025371bce5371daa610af957de8dd6a; >= a063f2fba3fa633a599253b62561051ac185fa99, < 777a88256d6f70672116e53400659cc417e1feaa; >= a063f2fba3fa633a599253b62561051ac185fa99, < 353d2c1d5492e53ae34f490a84494124dc3d3531; 5ed837a7e05bcba72bdcd86b12547ea5b796cc01; 5853618b022b8ed287a278540303e1b283d6f247; 3915341a935f3397f65a01580dc3bfc4cdf53d14; bea410635595f8efbec90c948da04c3613ef87ea; >= 5.10.117, < 5.10.261; >= 5.15.41, < 5.15.212; >= 4.14.280, < 4.15; >= 4.19.244, < 4.20; >= 5.4.195, < 5.5; >= 5.17.9, < 5.18
LinuxLinux5.18

References

Timeline

Published
Aug 15, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-72229In the Linux kernel, the following vulnerability has been resolved: batman-adv: clean untagged VLAN on netdev registration failure When anCVE-2026-72237.3A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected by this issue is the function fetch of the fCVE-2026-72230In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadv_fragCVE-2026-722317.5In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadv_senCVE-2026-722327.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commCVE-2026-722338.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pCVE-2026-722349.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pCVE-2026-722358.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_mayCVE-2026-72236In the Linux kernel, the following vulnerability has been resolved: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_CVE-2026-72237In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/brs: Fix kernel address leakage A user-only branch stack CVE-2026-72238In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang WCVE-2026-722399.3In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_E
CVE-2026-72228: Unscored | Vulnix