CVE-2026-72233EPSS p32.0%
CVE-2026-72233CVE-2026-72233
Description
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: reacquire gw address after skb realloc
The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate
the buffer behind the skb. Variables which were pointing to the old buffer
need to be reassigned to avoid an use-after-free.
Scoring
| CVSS | 8.8 () |
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.40% probability of exploitation · percentile 32.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-17 |