CVE-2026-52922

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the batman-adv module where the batadv dat forward data() function calls pskb copy for clone() to duplicate an skb for each DHT candidate without verifying the return value. This value is then passed to batadv send skb prepare unicast 4addr(), which dereferences the skb unconditionally. Consequently, a failed memory allocation leads to a NULL pointer dereference, a condition where the system attempts to read from a memory address that is null, typically resulting in a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.