In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 ("net: bridge: xmit: make sure we have at least eth header len bytes"), it is possible by for a local user with eBPF TC hook access to attach a tc filter which truncates the packet and redirects to an batadv interface. But the code assumes that at least ETH_HLEN bytes are available and thus might read outside of the available buffer. The batadv_interface_tx() must therefore always check itself if enough data is available for the ethernet header and don't rely on min_header_len.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0021.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
References
Link Providers
https://git.kernel.org/stable/c/38cd10b0aeec755d89f78722a2b83f4088ff0cb0 cve-icon cve-icon
https://git.kernel.org/stable/c/49df66b7993c80b80c7eb9a84ba5b3410c8296a0 cve-icon cve-icon
https://git.kernel.org/stable/c/58799078afebd5115e052bf69ad6697f9759dd6f cve-icon cve-icon
https://git.kernel.org/stable/c/6b4f521e01257387906f8b969ad3450d8208d4e2 cve-icon cve-icon
https://git.kernel.org/stable/c/811fea37620f2097955d95ce81cfdba03fd30f1b cve-icon cve-icon
https://git.kernel.org/stable/c/9e16b6751a8206de0b865d99bb02771e6751d12d cve-icon cve-icon
https://git.kernel.org/stable/c/dbeb4145d9778f922f459935da9a027750765a69 cve-icon cve-icon
https://git.kernel.org/stable/c/e6640923afee619d9fa82b07394dc9498e202304 cve-icon cve-icon
History

Sat, 15 Aug 2026 09:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 ("net: bridge: xmit: make sure we have at least eth header len bytes"), it is possible by for a local user with eBPF TC hook access to attach a tc filter which truncates the packet and redirects to an batadv interface. But the code assumes that at least ETH_HLEN bytes are available and thus might read outside of the available buffer. The batadv_interface_tx() must therefore always check itself if enough data is available for the ethernet header and don't rely on min_header_len.
Title batman-adv: ensure minimal ethernet header on TX
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:54:22.864Z

Reserved: 2026-08-09T03:40:39.913Z

Link: CVE-2026-72232

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:50.137

Modified: 2026-08-15T06:21:50.137

Link: CVE-2026-72232

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T09:30:04Z