Answer in brief
CVE-2026-80600 records a Unknown severity vulnerability in batman-adv: dat: acquire ARP hw source only after skb realloc. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=b61ec31c85756bbc898fb892555509afe709459a <a82fc217cb7a447313c76ebf9f09b100771b0ddf || >=b61ec31c85756bbc898fb892555509afe709459a <86aa79b43e5b561fd3648891165bd7313b541315 || >=b61ec31c85756bbc898fb892555509afe709459a <d755cd001fa2c248e186c1fc3df3d11d97dc843c || >=b61ec31c85756bbc898fb892555509afe709459a <3404be97b940a9b1ae1aea5fdbc6cdbbe9cd5146 || >=b61ec31c85756bbc898fb892555509afe709459a <01678c53a7717a748aee388b6839e7b9761d641c || >=b61ec31c85756bbc898fb892555509afe709459a <3b4c70c40f2e135a50cd38fc61c7d23a296a9981 || >=b61ec31c85756bbc898fb892555509afe709459a <059a70e1d12d6d99310e0599d37b0323557569a8 || >=b61ec31c85756bbc898fb892555509afe709459a <48067b2ae4504500a7093d9e1e16b42e70330480 | a82fc217cb7a447313c76ebf9f09b100771b0ddf, 86aa79b43e5b561fd3648891165bd7313b541315, d755cd001fa2c248e186c1fc3df3d11d97dc843c, 3404be97b940a9b1ae1aea5fdbc6cdbbe9cd5146, 01678c53a7717a748aee388b6839e7b9761d641c, 3b4c70c40f2e135a50cd38fc61c7d23a296a9981, 059a70e1d12d6d99310e0599d37b0323557569a8, 48067b2ae4504500a7093d9e1e16b42e70330480 |
| Linux/Linuxgeneric | 5.1 | Not reported |
Published upstream
Aug 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 28, 2026
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.
Quoted source text, attributed separately from HOL analysis.