Threat Investigation
Request a demo

CVE-2026-72226

Critical

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. This number is an u16 and gets multiplied by the size of the struct batadv_tvlv_tt_vlan_data (8 bytes). The size can therefore overflow the u16 used to store the tt_vlan_len. All additional safety checks to prevent out-of-bounds access of the TVLV buffer are invalid due to this overflow. Using size_t prevents this overflow and ensures that the safety checks compare against the actual buffer requirements.

SeverityCritical
CVSS9.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux0de12a4c4847f571d82a9cd96bc633eded41d7c6, d6ff4764ff784ede25f5c83a6f5883a74c93a5ea, 1898273c5dc8148267ef9f97cd2517a2822350e7, 604bd5042fbcd1ab9f7cd98fd847ec017aeede8a, 7319c0794f91be2734aac695794e7203606b49f8, 3256c05d5a9db34346eaf20f52dddde984852d77, 6222b443686525cb5a9b6a9cecf23b2e2ab23e2a, 7a581d9aaba8c82bd6177fa36b2588eea77f6e2b or later

Affected products

ProductAffected versionsFixed in
Linux Linux7ea7b4a142758deaf46c1af0ca9ceca6dd55138b ≤ v < 0de12a4c4847f571d82a9cd96bc633eded41d7c6, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b ≤ v < d6ff4764ff784ede25f5c83a6f5883a74c93a5ea, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b ≤ v < 1898273c5dc8148267ef9f97cd2517a2822350e7, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b ≤ v < 604bd5042fbcd1ab9f7cd98fd847ec017aeede8a, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b ≤ v < 7319c0794f91be2734aac695794e7203606b49f8, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b ≤ v < 3256c05d5a9db34346eaf20f52dddde984852d77, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b ≤ v < 6222b443686525cb5a9b6a9cecf23b2e2ab23e2a, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b ≤ v < 7a581d9aaba8c82bd6177fa36b2588eea77f6e2b, 3.130de12a4c4847f571d82a9cd96bc633eded41d7c6, d6ff4764ff784ede25f5c83a6f5883a74c93a5ea, 1898273c5dc8148267ef9f97cd2517a2822350e7, 604bd5042fbcd1ab9f7cd98fd847ec017aeede8a, 7319c0794f91be2734aac695794e7203606b49f8, 3256c05d5a9db34346eaf20f52dddde984852d77, 6222b443686525cb5a9b6a9cecf23b2e2ab23e2a, 7a581d9aaba8c82bd6177fa36b2588eea77f6e2b

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.