CVE-2026-89950

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the batman-adv module where batadv mcast forw packet() and batadv mcast forw scrape() may be called indirectly by batadv mcast forw mcsend(). In this scenario, the socket buffer (skbuff) is unshared but not linearized, which can trigger SKB LINEAR ASSERT() and lead to a fatal system crash. The failure occurs because linearization is required during the expansion of the head, as the scrape function can be executed during the initial batadv mcast forw mode() selection process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.