Strix
56.9K

CVE-2026-72234

CRITICALCVSS 9.8/10EPSS 0.21%

Last modified

CVE-2026-72234 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the ethernet header but missed for the unicast_packet pointer.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the ethernet header but missed for the unicast_packet pointer.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.21%

11.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= c018ad3de61a1dc4194879a53e5559e094aa7b1a, < aa9558af859934f24717d4bab97d61004f91a736; >= c018ad3de61a1dc4194879a53e5559e094aa7b1a, < 9c2c05629e46c1fd43931506d41c56a885a98eb4; >= c018ad3de61a1dc4194879a53e5559e094aa7b1a, < 7b162b36de750565404cd3b98315706622c6974f; >= c018ad3de61a1dc4194879a53e5559e094aa7b1a, < ed90eb5c68420cdfe67ec1f773324198d2ef6f50; >= c018ad3de61a1dc4194879a53e5559e094aa7b1a, < 979175834a699ccc3c4c0b0ba60ecae0f135a587; >= c018ad3de61a1dc4194879a53e5559e094aa7b1a, < b8afcf799b2cc92c41beebd029e53ed18960184a; >= c018ad3de61a1dc4194879a53e5559e094aa7b1a, < 9a7b7248798123efbd5fafe58461d57c7cc718af; >= c018ad3de61a1dc4194879a53e5559e094aa7b1a, < 7141990add3f75436f2933cb310654cad3b1e3e9
LinuxLinux3.13

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72234?
In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free. This was done correctly for the ethernet header but missed for the unicast_packet pointer.
How severe is CVE-2026-72234?
CVE-2026-72234 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72234?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72234?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST