CVE-2026-80599

batman-adv: dat: ensure accessible eth_hdr proto field

State: Published
Severity: 8.1 High
Published: Aug 28, 2026
Updated: Oct 16, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: dat: ensure accessible eth_hdr proto field

When batadv_get_vid() accesses the proto field of the ethernet header, it is not checking if the data itself is accessible. The caller is responsible for it. But in contrast to other call sites, batadv_dat_get_vid() and its caller didn't make sure this is true. This could have caused an out-of-bounds access.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	be1db4f6615b5e6156c807ea8985171c215c2d57 to before da3677b5ed362742d30ceab31bfafcdc74dc2642Affected be1db4f6615b5e6156c807ea8985171c215c2d57 to before 6d3ea37074bb747f745d28138f87745ba9bd97c5Affected be1db4f6615b5e6156c807ea8985171c215c2d57 to before 7913935d41f166c367bbf7cc76a79e50044388e8Affected be1db4f6615b5e6156c807ea8985171c215c2d57 to before 3c62694c31f043568c3f4784b8d247cc3bea6b4cAffected be1db4f6615b5e6156c807ea8985171c215c2d57 to before 5836a050d02e9598fa0f71e88dde28b63dfa35e3Affected be1db4f6615b5e6156c807ea8985171c215c2d57 to before 8f76277d02176cd739945bba3379448e2e22e799Affected be1db4f6615b5e6156c807ea8985171c215c2d57 to before 4407ff3af469356f9641c4a6e7072309bae86beaAffected be1db4f6615b5e6156c807ea8985171c215c2d57 to before 26560c4a03dc4d607331600c187f59ab2df5f341Affected
LinuxLinux	3.13Affected before 3.13Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

be1db4f6615b5e6156c807ea8985171c215c2d57 to before da3677b5ed362742d30ceab31bfafcdc74dc2642Affected
be1db4f6615b5e6156c807ea8985171c215c2d57 to before 6d3ea37074bb747f745d28138f87745ba9bd97c5Affected
be1db4f6615b5e6156c807ea8985171c215c2d57 to before 7913935d41f166c367bbf7cc76a79e50044388e8Affected
be1db4f6615b5e6156c807ea8985171c215c2d57 to before 3c62694c31f043568c3f4784b8d247cc3bea6b4cAffected
be1db4f6615b5e6156c807ea8985171c215c2d57 to before 5836a050d02e9598fa0f71e88dde28b63dfa35e3Affected
be1db4f6615b5e6156c807ea8985171c215c2d57 to before 8f76277d02176cd739945bba3379448e2e22e799Affected
be1db4f6615b5e6156c807ea8985171c215c2d57 to before 4407ff3af469356f9641c4a6e7072309bae86beaAffected
be1db4f6615b5e6156c807ea8985171c215c2d57 to before 26560c4a03dc4d607331600c187f59ab2df5f341Affected

LinuxLinux

3.13Affected
before 3.13Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.