Answer in brief
CVE-2026-72234 records a Unknown severity vulnerability in batman-adv: access unicast_ttvn skb->data only after skb realloc. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-72234 records a Unknown severity vulnerability in batman-adv: access unicast_ttvn skb->data only after skb realloc. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <aa9558af859934f24717d4bab97d61004f91a736 || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <9c2c05629e46c1fd43931506d41c56a885a98eb4 || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <7b162b36de750565404cd3b98315706622c6974f || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <ed90eb5c68420cdfe67ec1f773324198d2ef6f50 || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <979175834a699ccc3c4c0b0ba60ecae0f135a587 || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <b8afcf799b2cc92c41beebd029e53ed18960184a || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <9a7b7248798123efbd5fafe58461d57c7cc718af || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <7141990add3f75436f2933cb310654cad3b1e3e9 | aa9558af859934f24717d4bab97d61004f91a736, 9c2c05629e46c1fd43931506d41c56a885a98eb4, 7b162b36de750565404cd3b98315706622c6974f, ed90eb5c68420cdfe67ec1f773324198d2ef6f50, 979175834a699ccc3c4c0b0ba60ecae0f135a587, b8afcf799b2cc92c41beebd029e53ed18960184a, 9a7b7248798123efbd5fafe58461d57c7cc718af, 7141990add3f75436f2933cb310654cad3b1e3e9 |
| Linux/Linuxgeneric | 3.13 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the ethernet header but missed for the unicast_packet pointer.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <aa9558af859934f24717d4bab97d61004f91a736 || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <9c2c05629e46c1fd43931506d41c56a885a98eb4 || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <7b162b36de750565404cd3b98315706622c6974f || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <ed90eb5c68420cdfe67ec1f773324198d2ef6f50 || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <979175834a699ccc3c4c0b0ba60ecae0f135a587 || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <b8afcf799b2cc92c41beebd029e53ed18960184a || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <9a7b7248798123efbd5fafe58461d57c7cc718af || >=c018ad3de61a1dc4194879a53e5559e094aa7b1a <7141990add3f75436f2933cb310654cad3b1e3e9 | aa9558af859934f24717d4bab97d61004f91a736, 9c2c05629e46c1fd43931506d41c56a885a98eb4, 7b162b36de750565404cd3b98315706622c6974f, ed90eb5c68420cdfe67ec1f773324198d2ef6f50, 979175834a699ccc3c4c0b0ba60ecae0f135a587, b8afcf799b2cc92c41beebd029e53ed18960184a, 9a7b7248798123efbd5fafe58461d57c7cc718af, 7141990add3f75436f2933cb310654cad3b1e3e9 |
| Linux/Linuxgeneric | 3.13 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the ethernet header but missed for the unicast_packet pointer.
Quoted source text, attributed separately from HOL analysis.