CVE-2026-72230

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: frag: free unfragmentable packet

The caller of batadv_frag_send_packet() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions.

A failed pre-check must use the same error handling code as the rest of the function.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= ee75ed88879af88558818a5c6609d85f60ff0df4, < a5155aeeae8ead3c6081f7f197608033e4dcfe75; >= ee75ed88879af88558818a5c6609d85f60ff0df4, < 04ccbed8179e7d4d0906d00939300ddc5b48ce7e; >= ee75ed88879af88558818a5c6609d85f60ff0df4, < 601dff01a03ecced59938cdd69eeb2c66e4158f2; >= ee75ed88879af88558818a5c6609d85f60ff0df4, < 740542f11bf8c86411c429fbd7f84fc6bee80e76; >= ee75ed88879af88558818a5c6609d85f60ff0df4, < 59e1da1ab354d1f2b7bab8d44f846262f990ad9d; >= ee75ed88879af88558818a5c6609d85f60ff0df4, < 8f54162e07d3eea1e4ff21464cf2a815d79b6510; >= ee75ed88879af88558818a5c6609d85f60ff0df4, < 08047838817561cef33ada9774a2a4663d499ecb; >= ee75ed88879af88558818a5c6609d85f60ff0df4, < 6b628425aed49a1c7a4ffc997583840fc582d32b
LinuxLinux3.13

References

Timeline

Published
Aug 15, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-722317.5In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadv_senCVE-2026-722327.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commCVE-2026-722338.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pCVE-2026-722349.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pCVE-2026-722358.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_mayCVE-2026-72236In the Linux kernel, the following vulnerability has been resolved: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_CVE-2026-72237In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/brs: Fix kernel address leakage A user-only branch stack CVE-2026-72238In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang WCVE-2026-722399.3In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_ECVE-2026-72247.3A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /adminCVE-2026-72240In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device registration When platCVE-2026-72241In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by
CVE-2026-72230: Unscored | Vulnix