CVE-2026-72228: batman-adv: frag: fix primary_if leak on failed linearization
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: frag: fix primaryif leak on failed linearization
If the skb has a fraglist, it must be linearized before it can be split using skbsplit(). But when this step failed, it must not only free the skb but also take care of the reference to the already found primaryif.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72228?
CVE-2026-72228 has a risk rating of 24, indicating a critical security vulnerability in the Linux kernel.
How do I fix CVE-2026-72228?
To fix CVE-2026-72228, users should update to the patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-72228?
CVE-2026-72228 affects systems utilizing the batman-adv networking protocol in Linux kernels prior to the fix.
What impact does CVE-2026-72228 have?
CVE-2026-72228 can lead to potential memory leaks and system instability due to improper handling of skb fragmentation.
When was CVE-2026-72228 published?
CVE-2026-72228 was published on August 15, 2026.