CVE-2026-72227

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the batman-adv module. The issue occurs when accessing the num dests field of the struct batadv tvlv mcast tracker because the system uses offsetof() instead of offsetofend() to verify available space in the network header. Since offsetof() returns 0, the length comparison incorrectly indicates that sufficient data is available even when only 0 or 1 bytes are accessible.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.