CVE-2026-72230

batman-adv: frag: free unfragmentable packet

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: frag: free unfragmentable packet

The caller of batadv_frag_send_packet() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions.

A failed pre-check must use the same error handling code as the rest of the function.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ee75ed88879af88558818a5c6609d85f60ff0df4 to before a5155aeeae8ead3c6081f7f197608033e4dcfe75Affected ee75ed88879af88558818a5c6609d85f60ff0df4 to before 04ccbed8179e7d4d0906d00939300ddc5b48ce7eAffected ee75ed88879af88558818a5c6609d85f60ff0df4 to before 601dff01a03ecced59938cdd69eeb2c66e4158f2Affected ee75ed88879af88558818a5c6609d85f60ff0df4 to before 740542f11bf8c86411c429fbd7f84fc6bee80e76Affected ee75ed88879af88558818a5c6609d85f60ff0df4 to before 59e1da1ab354d1f2b7bab8d44f846262f990ad9dAffected ee75ed88879af88558818a5c6609d85f60ff0df4 to before 8f54162e07d3eea1e4ff21464cf2a815d79b6510Affected ee75ed88879af88558818a5c6609d85f60ff0df4 to before 08047838817561cef33ada9774a2a4663d499ecbAffected ee75ed88879af88558818a5c6609d85f60ff0df4 to before 6b628425aed49a1c7a4ffc997583840fc582d32bAffected
LinuxLinux	3.13Affected before 3.13Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

ee75ed88879af88558818a5c6609d85f60ff0df4 to before a5155aeeae8ead3c6081f7f197608033e4dcfe75Affected
ee75ed88879af88558818a5c6609d85f60ff0df4 to before 04ccbed8179e7d4d0906d00939300ddc5b48ce7eAffected
ee75ed88879af88558818a5c6609d85f60ff0df4 to before 601dff01a03ecced59938cdd69eeb2c66e4158f2Affected
ee75ed88879af88558818a5c6609d85f60ff0df4 to before 740542f11bf8c86411c429fbd7f84fc6bee80e76Affected
ee75ed88879af88558818a5c6609d85f60ff0df4 to before 59e1da1ab354d1f2b7bab8d44f846262f990ad9dAffected
ee75ed88879af88558818a5c6609d85f60ff0df4 to before 8f54162e07d3eea1e4ff21464cf2a815d79b6510Affected
ee75ed88879af88558818a5c6609d85f60ff0df4 to before 08047838817561cef33ada9774a2a4663d499ecbAffected
ee75ed88879af88558818a5c6609d85f60ff0df4 to before 6b628425aed49a1c7a4ffc997583840fc582d32bAffected

LinuxLinux

3.13Affected
before 3.13Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.