CVE-2026-80600 - Vulnerability Details

- batman-adv: dat: acquire ARP hw source only after skb realloc

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: dat: acquire ARP hw source only after skb realloc

The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer
behind the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an use-after-free.

Published: 2026-08-28

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`b61ec31c85756bbc898fb892555509afe709459a`	affected	< a82fc217cb7a447313c76ebf9f09b100771b0ddf
`b61ec31c85756bbc898fb892555509afe709459a`	affected	< 86aa79b43e5b561fd3648891165bd7313b541315
`b61ec31c85756bbc898fb892555509afe709459a`	affected	< d755cd001fa2c248e186c1fc3df3d11d97dc843c
`b61ec31c85756bbc898fb892555509afe709459a`	affected	< 3404be97b940a9b1ae1aea5fdbc6cdbbe9cd5146
`b61ec31c85756bbc898fb892555509afe709459a`	affected	< 01678c53a7717a748aee388b6839e7b9761d641c
`b61ec31c85756bbc898fb892555509afe709459a`	affected	< 3b4c70c40f2e135a50cd38fc61c7d23a296a9981
`b61ec31c85756bbc898fb892555509afe709459a`	affected	< 059a70e1d12d6d99310e0599d37b0323557569a8
`b61ec31c85756bbc898fb892555509afe709459a`	affected	< 48067b2ae4504500a7093d9e1e16b42e70330480

Linux

affected

Version	Status	Constraints
`5.1`	affected	—
`0`	unaffected	< 5.1
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[b61ec31c85756bbc898fb892555509afe709459a, a82fc217cb7a447313c76ebf9f09b100771b0ddf)`	affected	code_commit	—
`[b61ec31c85756bbc898fb892555509afe709459a, 86aa79b43e5b561fd3648891165bd7313b541315)`	affected	code_commit	—
`[b61ec31c85756bbc898fb892555509afe709459a, d755cd001fa2c248e186c1fc3df3d11d97dc843c)`	affected	code_commit	—
`[b61ec31c85756bbc898fb892555509afe709459a, 3404be97b940a9b1ae1aea5fdbc6cdbbe9cd5146)`	affected	code_commit	—
`[b61ec31c85756bbc898fb892555509afe709459a, 01678c53a7717a748aee388b6839e7b9761d641c)`	affected	code_commit	—
`[b61ec31c85756bbc898fb892555509afe709459a, 3b4c70c40f2e135a50cd38fc61c7d23a296a9981)`	affected	code_commit	—
`[b61ec31c85756bbc898fb892555509afe709459a, 059a70e1d12d6d99310e0599d37b0323557569a8)`	affected	code_commit	—
`[b61ec31c85756bbc898fb892555509afe709459a, 48067b2ae4504500a7093d9e1e16b42e70330480)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`5.1`	affected	semver	—
`[0,5.1)`	unaffected	generic	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00176.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/01678c53a7717a748aee388b6839e7b9761d641c
https://git.kernel.org/stable/c/059a70e1d12d6d99310e0599d37b0323557569a8
https://git.kernel.org/stable/c/3404be97b940a9b1ae1aea5fdbc6cdbbe9cd5146
https://git.kernel.org/stable/c/3b4c70c40f2e135a50cd38fc61c7d23a296a9981
https://git.kernel.org/stable/c/48067b2ae4504500a7093d9e1e16b42e70330480
https://git.kernel.org/stable/c/86aa79b43e5b561fd3648891165bd7313b541315
https://git.kernel.org/stable/c/a82fc217cb7a447313c76ebf9f09b100771b0ddf
https://git.kernel.org/stable/c/d755cd001fa2c248e186c1fc3df3d11d97dc843c

History

Fri, 28 Aug 2026 07:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.
Title		batman-adv: dat: acquire ARP hw source only after skb realloc
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/01678c53a7717a748aee388b6839e7b9761d641c https://git.kernel.org/stable/c/059a70e1d12d6d99310e0599d37b0323557569a8 https://git.kernel.org/stable/c/3404be97b940a9b1ae1aea5fdbc6cdbbe9cd5146 https://git.kernel.org/stable/c/3b4c70c40f2e135a50cd38fc61c7d23a296a9981 https://git.kernel.org/stable/c/48067b2ae4504500a7093d9e1e16b42e70330480 https://git.kernel.org/stable/c/86aa79b43e5b561fd3648891165bd7313b541315 https://git.kernel.org/stable/c/a82fc217cb7a447313c76ebf9f09b100771b0ddf https://git.kernel.org/stable/c/d755cd001fa2c248e186c1fc3df3d11d97dc843c

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-28T06:48:27.351Z

Updated: 2026-08-28T06:48:27.351Z

Reserved: 2026-08-26T14:34:25.771Z

Link: CVE-2026-80600

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-28T08:16:43.827

Modified: 2026-08-28T08:16:43.827

Link: CVE-2026-80600

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-28T09:15:05Z

Weaknesses

No weakness.

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object