CVE-2026-72233

High

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.

SeverityHigh
CVSS8.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux41819c5467b6eb8ab4567f0ac98702ce9b6abbb1, a9ab19fbca86b32e9a9ae9e1a63e70a7eab3400f, 4a6673c55752a7aa41e28f51660eb981504ca088, ab2bac47a02637df1128a151e81d3ec14767f4bb, dc16bbf53cede1baf564bf0c8a861114b64e18b3, e5e18886aadd3870e2d84e32a9678317fab1dd9e, f4fb97ecf677cd9c3aa4f3bfc6fbf5b0e4bdbbbf, cdf3b5af2bc4431e58629e8ad2086b1e9185c761 or later

Affected products

ProductAffected versionsFixed in
Linux Linux9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 ≤ v < 41819c5467b6eb8ab4567f0ac98702ce9b6abbb1, 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 ≤ v < a9ab19fbca86b32e9a9ae9e1a63e70a7eab3400f, 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 ≤ v < 4a6673c55752a7aa41e28f51660eb981504ca088, 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 ≤ v < ab2bac47a02637df1128a151e81d3ec14767f4bb, 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 ≤ v < dc16bbf53cede1baf564bf0c8a861114b64e18b3, 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 ≤ v < e5e18886aadd3870e2d84e32a9678317fab1dd9e, 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 ≤ v < f4fb97ecf677cd9c3aa4f3bfc6fbf5b0e4bdbbbf, 9e794b6bf4a2c65d698d7433ddfabc54a5d53a88 ≤ v < cdf3b5af2bc4431e58629e8ad2086b1e9185c761, 4.1241819c5467b6eb8ab4567f0ac98702ce9b6abbb1, a9ab19fbca86b32e9a9ae9e1a63e70a7eab3400f, 4a6673c55752a7aa41e28f51660eb981504ca088, ab2bac47a02637df1128a151e81d3ec14767f4bb, dc16bbf53cede1baf564bf0c8a861114b64e18b3, e5e18886aadd3870e2d84e32a9678317fab1dd9e, f4fb97ecf677cd9c3aa4f3bfc6fbf5b0e4bdbbbf, cdf3b5af2bc4431e58629e8ad2086b1e9185c761

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-72233 · Linux · Dark Radar