CVE-2026-80601EPSS p32.0%
CVE-2026-80601CVE-2026-80601
Description
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: gw: acquire ethernet header only after skb realloc
The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer
behind the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an use-after-free.
Scoring
| CVSS | 8.8 () |
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.40% probability of exploitation · percentile 32.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-29 |