{"id":"CVE-2026-72230","title":"batman-adv: frag: free unfragmentable packet","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: frag: free unfragmentable packet\n\nThe caller of batadv_frag_send_packet() assume that the skb provided to the\nfunction are always consumed. But the pre-chec…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < a5155aeeae8ead3c6081f7f197608033e4dcfe75","Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 04ccbed8179e7d4d0906d00939300ddc5b48ce7e","Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 601dff01a03ecced59938cdd69eeb2c66e4158f2","Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 740542f11bf8c86411c429fbd7f84fc6bee80e76","Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 59e1da1ab354d1f2b7bab8d44f846262f990ad9d","Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 8f54162e07d3eea1e4ff21464cf2a815d79b6510","Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 08047838817561cef33ada9774a2a4663d499ecb","Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 6b628425aed49a1c7a4ffc997583840fc582d32b","Linux 3.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:53:13.863522Z"},"published":"2026-08-15","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:23.358Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72230","references":[{"url":"https://git.kernel.org/stable/c/a5155aeeae8ead3c6081f7f197608033e4dcfe75"},{"url":"https://git.kernel.org/stable/c/04ccbed8179e7d4d0906d00939300ddc5b48ce7e"},{"url":"https://git.kernel.org/stable/c/601dff01a03ecced59938cdd69eeb2c66e4158f2"},{"url":"https://git.kernel.org/stable/c/740542f11bf8c86411c429fbd7f84fc6bee80e76"},{"url":"https://git.kernel.org/stable/c/59e1da1ab354d1f2b7bab8d44f846262f990ad9d"},{"url":"https://git.kernel.org/stable/c/8f54162e07d3eea1e4ff21464cf2a815d79b6510"},{"url":"https://git.kernel.org/stable/c/08047838817561cef33ada9774a2a4663d499ecb"},{"url":"https://git.kernel.org/stable/c/6b628425aed49a1c7a4ffc997583840fc582d32b"}],"tags":["cve.org"],"epss":0.0022,"epssPercentile":0.12538,"ingestedAt":"2026-11-06T18:00:12.585Z","slug":"CVE-2026-72230","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: frag: free unfragmentable packet\n\nThe caller of batadv_frag_send_packet() assume that the skb provided to the\nfunction are always consumed. But the pre-check for an empty payload or the\nzero fragment size returned an error without any further actions.\n\nA failed pre-check must use the same error handling code as the rest of the\nfunction.\n\n## Affected\n\n- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < a5155aeeae8ead3c6081f7f197608033e4dcfe75`\n- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 04ccbed8179e7d4d0906d00939300ddc5b48ce7e`\n- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 601dff01a03ecced59938cdd69eeb2c66e4158f2`\n- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 740542f11bf8c86411c429fbd7f84fc6bee80e76`\n- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 59e1da1ab354d1f2b7bab8d44f846262f990ad9d`\n- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 8f54162e07d3eea1e4ff21464cf2a815d79b6510`\n- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 08047838817561cef33ada9774a2a4663d499ecb`\n- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 6b628425aed49a1c7a4ffc997583840fc582d32b`\n- `Linux 3.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}