CVE-2026-72228

Summary

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: frag: fix primary_if leak on failed linearization

If the skb has a frag_list, it must be linearized before it can be split using skb_split(). But when this step failed, it must not only free the skb but also take care of the reference to the already found primary_if.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa6a73781b460c4fe2cf2c40400ac91dfddb353fa < e59b1960f71521ce4eb4397c4e82f5285601ab57affected
LinuxLinux8f37aad74f46dd5d8b95fac17804b75f77931fa9 < c1b28432fd6345e0d2308f39c507ed5750c265d2affected
LinuxLinuxa063f2fba3fa633a599253b62561051ac185fa99 < 4f3bf293f7662500142234ae6f23725953690bc9affected
LinuxLinuxa063f2fba3fa633a599253b62561051ac185fa99 < d2148aeee93197ccf821114489775132f28eebf5affected
LinuxLinuxa063f2fba3fa633a599253b62561051ac185fa99 < db3c700826e8126fbdaa83468a9c4ee4ee65319faffected
LinuxLinuxa063f2fba3fa633a599253b62561051ac185fa99 < a90f4fff9025371bce5371daa610af957de8dd6aaffected
LinuxLinuxa063f2fba3fa633a599253b62561051ac185fa99 < 777a88256d6f70672116e53400659cc417e1feaaaffected
LinuxLinuxa063f2fba3fa633a599253b62561051ac185fa99 < 353d2c1d5492e53ae34f490a84494124dc3d3531affected
LinuxLinux5ed837a7e05bcba72bdcd86b12547ea5b796cc01affected
LinuxLinux5853618b022b8ed287a278540303e1b283d6f247affected
LinuxLinux3915341a935f3397f65a01580dc3bfc4cdf53d14affected
LinuxLinuxbea410635595f8efbec90c948da04c3613ef87eaaffected
LinuxLinux5.10.117 < 5.10.261affected
LinuxLinux5.15.41 < 5.15.212affected
LinuxLinux4.14.280 < 4.15affected
LinuxLinux4.19.244 < 4.20affected
LinuxLinux5.4.195 < 5.5affected
LinuxLinux5.17.9 < 5.18affected
LinuxLinux5.18affected
LinuxLinux0 < 5.18unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References