CVE-2026-72233
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
In the Linux kernel's batman-adv module, after pskb_may_pull() is called by batadv_bla_is_backbone_gw(), the skb buffer may be reallocated. The gateway address pointer was not reassigned after this reallocation, potentially leading to a use-after-free.
Risk Assessment
The vulnerability could allow an attacker to access freed memory, potentially leading to system crash or privilege escalation.
Recommendation
Install the Linux kernel patch that addresses this issue. Regularly update systems to avoid exploitation of known vulnerabilities.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.