Security Advisory

CVE-2026-72235

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-15 05:54:25
Last updated 2026-08-17 05:41:52
Assigner Linux
CVSS score 8.8
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the VLAN header but missed for the ethernet header which is later used for the TT and AP isolation handling.