CVE-2026-72232

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72232
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72232.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72232
Downstream
Published
2026-08-15T05:54:22Z
Modified
2026-08-18T03:56:39Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
batman-adv: ensure minimal ethernet header on TX
Details

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: ensure minimal ethernet header on TX

As documented in commit 8bd67ebb50c0 ("net: bridge: xmit: make sure we have at least eth header len bytes"), it is possible by for a local user with eBPF TC hook access to attach a tc filter which truncates the packet and redirects to an batadv interface. But the code assumes that at least ETH_HLEN bytes are available and thus might read outside of the available buffer.

The batadv_interface_tx() must therefore always check itself if enough data is available for the ethernet header and don't rely on min_header_len.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72232.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c6c8fea29769d998d94fcec9b9f14d4b52b349d3
Fixed
58799078afebd5115e052bf69ad6697f9759dd6f
Fixed
38cd10b0aeec755d89f78722a2b83f4088ff0cb0
Fixed
811fea37620f2097955d95ce81cfdba03fd30f1b
Fixed
e6640923afee619d9fa82b07394dc9498e202304
Fixed
6b4f521e01257387906f8b969ad3450d8208d4e2
Fixed
9e16b6751a8206de0b865d99bb02771e6751d12d
Fixed
dbeb4145d9778f922f459935da9a027750765a69
Fixed
49df66b7993c80b80c7eb9a84ba5b3410c8296a0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72232.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.38
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72232.json"