CVE-2026-72235

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the batman-adv module. The function pskb may pull() within batadv interface rx() can reallocate the buffer behind the socket buffer (skb). While the VLAN header was handled correctly, variables pointing to the ethernet header were not reassigned after reallocation. This leads to a use-after-free condition when the ethernet header is subsequently used for AP isolation and TT (Transit Traffic) handling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.