Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-72233

batman-adv: bla: reacquire gw address after skb realloc

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.97, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 · fixed in 41819c5467b6eb8ab4567f0ac98702ce9b6abbb1; From 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 · fixed in a9ab19fbca86b32e9a9ae9e1a63e70a7eab3400f; From 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 · fixed in 4a6673c55752a7aa41e28f51660eb981504ca088; From 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 · fixed in ab2bac47a02637df1128a151e81d3ec14767f4bb; From 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 · fixed in dc16bbf53cede1baf564bf0c8a861114b64e18b3; From 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 · fixed in e5e18886aadd3870e2d84e32a9678317fab1dd9e; From 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 · fixed in f4fb97ecf677cd9c3aa4f3bfc6fbf5b0e4bdbbbf; From 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 · fixed in cdf3b5af2bc4431e58629e8ad2086b1e9185c761

  • Linux Linux

    4.12

  • KernelLinux

    From 4.12.0 · fixed in 5.10.261; From 5.11.0 · fixed in 5.15.212; From 5.16.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.19.0 · fixed in 7.1.5

References 8

git.kernel.org