CVE-2026-89949batman-adv: dat: avoid unaligned fault in IP extraction
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadv_arp_ip_src or the batadv_arp_ip_dst will have an unaligned access (on HW without native unaligned read support). Use get_unaligned() to handle this properly on all architectures.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f before b1bbc694ca51adb8dbed3f3235b4fcbdb44e0e20; from 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f before 15dbfb37f0e1a085d48deeb8f5238e9d28127dde; from 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f before a170d4617e8cca05a1314de61728a262ef272782; from 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f before c74a4acf41d19f21199dec2d6c813c90d31cd02c; from 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f before 91c99b4e152023c7d458a5dedd52d2b0d7df4ce3; 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f builds before 1cfa7d5f70d54cb8c7e82df739430782d1996ee1; 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f builds before 0c2df865338bbf92aa45b9253e5f9b8ef2d9992f; from 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f before 0121afa52cdb88cfb4d5d7bd126a23a9100121d8 | CNA record |
References
- https://git.kernel.org/stable/c/b1bbc694ca51adb8dbed3f3235b4fcbdb44e0e20
- https://git.kernel.org/stable/c/15dbfb37f0e1a085d48deeb8f5238e9d28127dde
- https://git.kernel.org/stable/c/a170d4617e8cca05a1314de61728a262ef272782
- https://git.kernel.org/stable/c/c74a4acf41d19f21199dec2d6c813c90d31cd02c
- https://git.kernel.org/stable/c/91c99b4e152023c7d458a5dedd52d2b0d7df4ce3
- https://git.kernel.org/stable/c/1cfa7d5f70d54cb8c7e82df739430782d1996ee1
- https://git.kernel.org/stable/c/0c2df865338bbf92aa45b9253e5f9b8ef2d9992f
- https://git.kernel.org/stable/c/0121afa52cdb88cfb4d5d7bd126a23a9100121d8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.