CVE-2026-72230: batman-adv: frag: free unfragmentable packet
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: frag: free unfragmentable packet
The caller of batadvfragsendpacket() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions.
A failed pre-check must use the same error handling code as the rest of the function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72230?
CVE-2026-72230 has a risk rating of 27, indicating a substantial impact on systems that are affected.
How do I fix CVE-2026-72230?
To fix CVE-2026-72230, you should update your Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2026-72230?
CVE-2026-72230 primarily affects systems running the Linux kernel with the batman-adv networking component.
What are the potential consequences of CVE-2026-72230?
Exploitation of CVE-2026-72230 could lead to memory corruption and instability in systems using the batman-adv networking protocol.
Is CVE-2026-72230 being actively exploited?
As of the vulnerability's report, there is no indication that CVE-2026-72230 is being actively exploited in the wild.