CVE-2026-72228None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primary_if leak on failed linearization If the skb has a frag_list, it must be linearized before it can be split using skb_split(). But when this…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: frag: fix primary_if leak on failed linearization
If the skb has a frag_list, it must be linearized before it can be split using skb_split(). But when this step failed, it must not only free the skb but also take care of the reference to the already found primary_if.
Linux >= a6a73781b460c4fe2cf2c40400ac91dfddb353fa < e59b1960f71521ce4eb4397c4e82f5285601ab57Linux >= 8f37aad74f46dd5d8b95fac17804b75f77931fa9 < c1b28432fd6345e0d2308f39c507ed5750c265d2Linux >= a063f2fba3fa633a599253b62561051ac185fa99 < 4f3bf293f7662500142234ae6f23725953690bc9Linux >= a063f2fba3fa633a599253b62561051ac185fa99 < d2148aeee93197ccf821114489775132f28eebf5Linux >= a063f2fba3fa633a599253b62561051ac185fa99 < db3c700826e8126fbdaa83468a9c4ee4ee65319fLinux >= a063f2fba3fa633a599253b62561051ac185fa99 < a90f4fff9025371bce5371daa610af957de8dd6aLinux >= a063f2fba3fa633a599253b62561051ac185fa99 < 777a88256d6f70672116e53400659cc417e1feaaLinux >= a063f2fba3fa633a599253b62561051ac185fa99 < 353d2c1d5492e53ae34f490a84494124dc3d3531Linux 5ed837a7e05bcba72bdcd86b12547ea5b796cc01Linux 5853618b022b8ed287a278540303e1b283d6f247Linux 3915341a935f3397f65a01580dc3bfc4cdf53d14Linux bea410635595f8efbec90c948da04c3613ef87eaLinux >= 5.10.117 < 5.10.261Linux >= 5.15.41 < 5.15.212Linux >= 4.14.280 < 4.15Linux >= 4.19.244 < 4.20Linux >= 5.4.195 < 5.5Linux >= 5.17.9 < 5.18Linux 5.18Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses