SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-72233

HIGH · CVSS 8.8 EPSS 0.34%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's batman-adv module, specifically in the handling of gateway addresses during buffer reallocation. This flaw can lead to a use-after-free condition, potentially allowing an attacker to execute arbitrary code or cause a denial of service. Organizations utilizing the Linux kernel with batman-adv should prioritize patching this vulnerability to mitigate associated risks.

CVE
CVE-2026-72233
Severity
HIGH
CVSS
8.8
EPSS
0.34%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.