CVE-2026-72230
batman-adv: frag: free unfragmentable packet
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadv_frag_send_packet() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions. A failed pre-check must use the same error handling code as the rest of the function.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
3.13
References 8
git.kernel.org
- stable/c/a5155aeeae8ead3c6081f7f197608033e4dcfe75
- stable/c/04ccbed8179e7d4d0906d00939300ddc5b48ce7e
- stable/c/601dff01a03ecced59938cdd69eeb2c66e4158f2
- stable/c/740542f11bf8c86411c429fbd7f84fc6bee80e76
- stable/c/59e1da1ab354d1f2b7bab8d44f846262f990ad9d
- stable/c/8f54162e07d3eea1e4ff21464cf2a815d79b6510
- stable/c/08047838817561cef33ada9774a2a4663d499ecb
- stable/c/6b628425aed49a1c7a4ffc997583840fc582d32b