一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-72235 [HIGH] – In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: retrieve ethhdr after potential skb realloc on RX

pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind
the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an use-after-free.

This was done correctly for the VLAN header but missed for the ethernet
header which is later used for the TT and AP isolation handling.