CVE-2026-72230batman-adv: frag: free unfragmentable packet
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadv_frag_send_packet() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions. A failed pre-check must use the same error handling code as the rest of the function.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ee75ed88879af88558818a5c6609d85f60ff0df4 before a5155aeeae8ead3c6081f7f197608033e4dcfe75; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 04ccbed8179e7d4d0906d00939300ddc5b48ce7e; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 601dff01a03ecced59938cdd69eeb2c66e4158f2; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 740542f11bf8c86411c429fbd7f84fc6bee80e76; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 59e1da1ab354d1f2b7bab8d44f846262f990ad9d; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 8f54162e07d3eea1e4ff21464cf2a815d79b6510; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 08047838817561cef33ada9774a2a4663d499ecb; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 6b628425aed49a1c7a4ffc997583840fc582d32b | CNA record |
References
- https://git.kernel.org/stable/c/a5155aeeae8ead3c6081f7f197608033e4dcfe75
- https://git.kernel.org/stable/c/04ccbed8179e7d4d0906d00939300ddc5b48ce7e
- https://git.kernel.org/stable/c/601dff01a03ecced59938cdd69eeb2c66e4158f2
- https://git.kernel.org/stable/c/740542f11bf8c86411c429fbd7f84fc6bee80e76
- https://git.kernel.org/stable/c/59e1da1ab354d1f2b7bab8d44f846262f990ad9d
- https://git.kernel.org/stable/c/8f54162e07d3eea1e4ff21464cf2a815d79b6510
- https://git.kernel.org/stable/c/08047838817561cef33ada9774a2a4663d499ecb
- https://git.kernel.org/stable/c/6b628425aed49a1c7a4ffc997583840fc582d32b
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.