CVE-2026-89949
Last modified
CVE-2026-89949 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadv_arp_ip_src or the batadv_arp_ip_dst will have an unaligned access (on HW without native unaligned read support). Use get_unaligned() to handle this properly on all architectures..
Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadv_arp_ip_src or the batadv_arp_ip_dst will have an unaligned access (on HW without native unaligned read support). Use get_unaligned() to handle this properly on all architectures.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f, < b1bbc694ca51adb8dbed3f3235b4fcbdb44e0e20; >= 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f, < 15dbfb37f0e1a085d48deeb8f5238e9d28127dde; >= 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f, < a170d4617e8cca05a1314de61728a262ef272782; >= 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f, < c74a4acf41d19f21199dec2d6c813c90d31cd02c; >= 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f, < 91c99b4e152023c7d458a5dedd52d2b0d7df4ce3; >= 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f, < 1cfa7d5f70d54cb8c7e82df739430782d1996ee1; >= 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f, < 0c2df865338bbf92aa45b9253e5f9b8ef2d9992f; >= 5c3a0e5535933349a5d6e6bc8b704e0611f21d3f, < 0121afa52cdb88cfb4d5d7bd126a23a9100121d8 |
| Linux | Linux | 3.8 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-89949?
How severe is CVE-2026-89949?
How do I fix CVE-2026-89949?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-89943In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-89944In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89945In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89946In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89947In the Linux kernel, the following vulnerability has been re…8
- CVE-2026-89948In the Linux kernel, the following vulnerability has been re…
- CVE-2026-8995The Poll Maker – Versus Polls, Anonymous Polls, Image Polls …4.3
- CVE-2026-89950In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89951In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-89952In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89953In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89954In the Linux kernel, the following vulnerability has been re…8
Are you affected by CVE-2026-89949?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
