Vulnerability in Linux

CVE-2026-72230

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadv_frag_send_packet() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions. A failed pre-check must use the same error handling code as the rest of the function.

Affected products

  • Linux — versions ee75ed88879af88558818a5c6609d85f60ff0df4, 3.13, 0

References