SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-80600

CRITICAL · CVSS 9.8 EPSS 0.51%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's batman-adv module could lead to a use-after-free condition due to improper handling of buffer reallocations during ARP hardware source acquisition. This issue affects systems utilizing the batman-adv networking protocol, potentially allowing an attacker to exploit memory management flaws. Administrators of Linux systems running batman-adv should prioritize applying patches to mitigate the risk of exploitation.

CVE
CVE-2026-80600
Severity
CRITICAL
CVSS
9.8
EPSS
0.51%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.