CVE-2026-80601batman-adv: gw: acquire ethernet header only after skb realloc
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before 2760b38222c8828b075802342fe3b91eb823d542; 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 builds before 6c37f1166549c999ccd164b0cb6462d1ae68f8f6; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before b79884a5567bf788fb76c30832467cf6a56f3c0d; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before afac8096bde4948e3caa7e4dd733867cfbd3018e; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before e3f4325e35dd6e76b80665f3510738ce34819753; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before e6b43acd34b219b807e65096ce207b087942779d; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before 916dac5f2944f63f07f7b501acbea6737dbbed0e; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before 77880a3be88d378d60cc1e8f8ec70430e2ed0518 | CNA record |
References
- https://git.kernel.org/stable/c/2760b38222c8828b075802342fe3b91eb823d542
- https://git.kernel.org/stable/c/6c37f1166549c999ccd164b0cb6462d1ae68f8f6
- https://git.kernel.org/stable/c/b79884a5567bf788fb76c30832467cf6a56f3c0d
- https://git.kernel.org/stable/c/afac8096bde4948e3caa7e4dd733867cfbd3018e
- https://git.kernel.org/stable/c/e3f4325e35dd6e76b80665f3510738ce34819753
- https://git.kernel.org/stable/c/e6b43acd34b219b807e65096ce207b087942779d
- https://git.kernel.org/stable/c/916dac5f2944f63f07f7b501acbea6737dbbed0e
- https://git.kernel.org/stable/c/77880a3be88d378d60cc1e8f8ec70430e2ed0518
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.