CVE-2026-72228batman-adv: frag: fix primary_if leak on failed linearization
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primary_if leak on failed linearization If the skb has a frag_list, it must be linearized before it can be split using skb_split(). But when this step failed, it must not only free the skb but also take care of the reference to the already found primary_if.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from a6a73781b460c4fe2cf2c40400ac91dfddb353fa before e59b1960f71521ce4eb4397c4e82f5285601ab57; from 8f37aad74f46dd5d8b95fac17804b75f77931fa9 before c1b28432fd6345e0d2308f39c507ed5750c265d2; from a063f2fba3fa633a599253b62561051ac185fa99 before 4f3bf293f7662500142234ae6f23725953690bc9; from a063f2fba3fa633a599253b62561051ac185fa99 before d2148aeee93197ccf821114489775132f28eebf5; from a063f2fba3fa633a599253b62561051ac185fa99 before db3c700826e8126fbdaa83468a9c4ee4ee65319f; from a063f2fba3fa633a599253b62561051ac185fa99 before a90f4fff9025371bce5371daa610af957de8dd6a; from a063f2fba3fa633a599253b62561051ac185fa99 before 777a88256d6f70672116e53400659cc417e1feaa; from a063f2fba3fa633a599253b62561051ac185fa99 before 353d2c1d5492e53ae34f490a84494124dc3d3531; and 10 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/e59b1960f71521ce4eb4397c4e82f5285601ab57
- https://git.kernel.org/stable/c/c1b28432fd6345e0d2308f39c507ed5750c265d2
- https://git.kernel.org/stable/c/4f3bf293f7662500142234ae6f23725953690bc9
- https://git.kernel.org/stable/c/d2148aeee93197ccf821114489775132f28eebf5
- https://git.kernel.org/stable/c/db3c700826e8126fbdaa83468a9c4ee4ee65319f
- https://git.kernel.org/stable/c/a90f4fff9025371bce5371daa610af957de8dd6a
- https://git.kernel.org/stable/c/777a88256d6f70672116e53400659cc417e1feaa
- https://git.kernel.org/stable/c/353d2c1d5492e53ae34f490a84494124dc3d3531
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.