vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-72233

batman-adv: bla: reacquire gw address after skb realloc

HIGH
8.8
CVSS Score
Published: August 15, 2026 at 05:54 AM UTC
Updated: October 16, 2026 at 07:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.129e794b6bf4a2c65d698d7433ddfabc54a5d53a88
Vendor states this is fixed in 41819c5467b6eb8ab4567f0ac98702ce9b6abbb1 (fixed)
Vendor states this is fixed in 4a6673c55752a7aa41e28f51660eb981504ca088 (fixed)
Vendor states this is fixed in a9ab19fbca86b32e9a9ae9e1a63e70a7eab3400f (fixed)
Vendor states this is fixed in ab2bac47a02637df1128a151e81d3ec14767f4bb (fixed)
Vendor states this is fixed in cdf3b5af2bc4431e58629e8ad2086b1e9185c761 (fixed)
Vendor states this is fixed in dc16bbf53cede1baf564bf0c8a861114b64e18b3 (fixed)
Vendor states this is fixed in e5e18886aadd3870e2d84e32a9678317fab1dd9e (fixed)
Vendor states this is fixed in f4fb97ecf677cd9c3aa4f3bfc6fbf5b0e4bdbbbf (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 5.10.261 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/41819c5467b6eb8ab4567f0ac98702ce9b6abbb1
Source: cverecord
https://git.kernel.org/stable/c/a9ab19fbca86b32e9a9ae9e1a63e70a7eab3400f
Source: cverecord
https://git.kernel.org/stable/c/4a6673c55752a7aa41e28f51660eb981504ca088
Source: cverecord
https://git.kernel.org/stable/c/ab2bac47a02637df1128a151e81d3ec14767f4bb
Source: cverecord
https://git.kernel.org/stable/c/dc16bbf53cede1baf564bf0c8a861114b64e18b3
Source: cverecord
https://git.kernel.org/stable/c/e5e18886aadd3870e2d84e32a9678317fab1dd9e
Source: cverecord
https://git.kernel.org/stable/c/f4fb97ecf677cd9c3aa4f3bfc6fbf5b0e4bdbbbf
Source: cverecord
https://git.kernel.org/stable/c/cdf3b5af2bc4431e58629e8ad2086b1e9185c761

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card