CVE-2026-72230

Summary

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: frag: free unfragmentable packet

The caller of batadv_frag_send_packet() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions.

A failed pre-check must use the same error handling code as the rest of the function.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxee75ed88879af88558818a5c6609d85f60ff0df4 < a5155aeeae8ead3c6081f7f197608033e4dcfe75affected
LinuxLinuxee75ed88879af88558818a5c6609d85f60ff0df4 < 04ccbed8179e7d4d0906d00939300ddc5b48ce7eaffected
LinuxLinuxee75ed88879af88558818a5c6609d85f60ff0df4 < 601dff01a03ecced59938cdd69eeb2c66e4158f2affected
LinuxLinuxee75ed88879af88558818a5c6609d85f60ff0df4 < 740542f11bf8c86411c429fbd7f84fc6bee80e76affected
LinuxLinuxee75ed88879af88558818a5c6609d85f60ff0df4 < 59e1da1ab354d1f2b7bab8d44f846262f990ad9daffected
LinuxLinuxee75ed88879af88558818a5c6609d85f60ff0df4 < 8f54162e07d3eea1e4ff21464cf2a815d79b6510affected
LinuxLinuxee75ed88879af88558818a5c6609d85f60ff0df4 < 08047838817561cef33ada9774a2a4663d499ecbaffected
LinuxLinuxee75ed88879af88558818a5c6609d85f60ff0df4 < 6b628425aed49a1c7a4ffc997583840fc582d32baffected
LinuxLinux3.13affected
LinuxLinux0 < 3.13unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References