Strix
63.6K

CVE-2026-80601

HIGHCVSS 8.8/10EPSS 0.18%

Last modified

CVE-2026-80601 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.

Metrics

CVSS 3.1
8.8/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.18%

7.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9, < 2760b38222c8828b075802342fe3b91eb823d542; >= 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9, < 6c37f1166549c999ccd164b0cb6462d1ae68f8f6; >= 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9, < b79884a5567bf788fb76c30832467cf6a56f3c0d; >= 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9, < afac8096bde4948e3caa7e4dd733867cfbd3018e; >= 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9, < e3f4325e35dd6e76b80665f3510738ce34819753; >= 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9, < e6b43acd34b219b807e65096ce207b087942779d; >= 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9, < 916dac5f2944f63f07f7b501acbea6737dbbed0e; >= 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9, < 77880a3be88d378d60cc1e8f8ec70430e2ed0518
LinuxLinux3.14

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80601?
In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.
How severe is CVE-2026-80601?
CVE-2026-80601 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2026-80601?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80601?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST