---
id: CVE-2026-72230
title: 'batman-adv: frag: free unfragmentable packet'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  batman-adv: frag: free unfragmentable packet

  The caller of batadv_frag_send_packet() assume that the skb provided to the
  function are always consumed. But the pre-chec…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 <
    a5155aeeae8ead3c6081f7f197608033e4dcfe75
  - >-
    Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 <
    04ccbed8179e7d4d0906d00939300ddc5b48ce7e
  - >-
    Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 <
    601dff01a03ecced59938cdd69eeb2c66e4158f2
  - >-
    Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 <
    740542f11bf8c86411c429fbd7f84fc6bee80e76
  - >-
    Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 <
    59e1da1ab354d1f2b7bab8d44f846262f990ad9d
  - >-
    Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 <
    8f54162e07d3eea1e4ff21464cf2a815d79b6510
  - >-
    Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 <
    08047838817561cef33ada9774a2a4663d499ecb
  - >-
    Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 <
    6b628425aed49a1c7a4ffc997583840fc582d32b
  - Linux 3.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:53:13.863522Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:23.358Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72230'
references:
  - url: 'https://git.kernel.org/stable/c/a5155aeeae8ead3c6081f7f197608033e4dcfe75'
  - url: 'https://git.kernel.org/stable/c/04ccbed8179e7d4d0906d00939300ddc5b48ce7e'
  - url: 'https://git.kernel.org/stable/c/601dff01a03ecced59938cdd69eeb2c66e4158f2'
  - url: 'https://git.kernel.org/stable/c/740542f11bf8c86411c429fbd7f84fc6bee80e76'
  - url: 'https://git.kernel.org/stable/c/59e1da1ab354d1f2b7bab8d44f846262f990ad9d'
  - url: 'https://git.kernel.org/stable/c/8f54162e07d3eea1e4ff21464cf2a815d79b6510'
  - url: 'https://git.kernel.org/stable/c/08047838817561cef33ada9774a2a4663d499ecb'
  - url: 'https://git.kernel.org/stable/c/6b628425aed49a1c7a4ffc997583840fc582d32b'
tags:
  - cve.org
epss: 0.0022
epssPercentile: 0.12538
ingestedAt: '2026-11-06T18:00:12.585Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: frag: free unfragmentable packet

The caller of batadv_frag_send_packet() assume that the skb provided to the
function are always consumed. But the pre-check for an empty payload or the
zero fragment size returned an error without any further actions.

A failed pre-check must use the same error handling code as the rest of the
function.

## Affected

- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < a5155aeeae8ead3c6081f7f197608033e4dcfe75`
- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 04ccbed8179e7d4d0906d00939300ddc5b48ce7e`
- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 601dff01a03ecced59938cdd69eeb2c66e4158f2`
- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 740542f11bf8c86411c429fbd7f84fc6bee80e76`
- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 59e1da1ab354d1f2b7bab8d44f846262f990ad9d`
- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 8f54162e07d3eea1e4ff21464cf2a815d79b6510`
- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 08047838817561cef33ada9774a2a4663d499ecb`
- `Linux >= ee75ed88879af88558818a5c6609d85f60ff0df4 < 6b628425aed49a1c7a4ffc997583840fc582d32b`
- `Linux 3.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.