High 7.5Published Jun 24, 2026

CVE-2026-52922batman-adv: dat: handle forward allocation error

Updated under an hour ago (Oct 27, 2026, 6:10 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error batadv_dat_forward_data() calls pskb_copy_for_clone() to duplicate an skb for each DHT candidate, but does not check the return value before passing it to batadv_send_skb_prepare_unicast_4addr(). That function dereferences the skb unconditionally, so a failed allocation triggers a NULL pointer dereference. Skip forwarding to the current DHT candidate on allocation failure.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	785ea1144182c341b8b85b0f8180291839d176a8 builds before 9bcebaedfb8479cb4affb23c7a0d000ca9a20e73; 785ea1144182c341b8b85b0f8180291839d176a8 builds before 2edb8aeb3cdda9d00ec4997252dc5bcd6f54d8ef; from 785ea1144182c341b8b85b0f8180291839d176a8 before ce0c381199402a2c58f4599f4f6ed100d872d0da; from 785ea1144182c341b8b85b0f8180291839d176a8 before 866ac1d57040ed0b44ca732e3c66b3aa6b93011c; 785ea1144182c341b8b85b0f8180291839d176a8 builds before 4d420d9ee70a220a2cd95aa0dd2e15acad66a505; 785ea1144182c341b8b85b0f8180291839d176a8 builds before 9cceea8eeba710def2a5707ee00f00c74a9a1cac; from 785ea1144182c341b8b85b0f8180291839d176a8 before cf48e75fc4fe0d5cc7721c82d454221d01367b93; 785ea1144182c341b8b85b0f8180291839d176a8 builds before 2d8826a2d3657cea66fb0370f9e521575a673871	CNA record
linux linux_kernel linux:linux_kernel	from 3.8 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.142; from 6.7 before 6.12.92; from 6.13 before 6.18.34; from 6.19 before 7.0.11; 7.1; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/9bcebaedfb8479cb4affb23c7a0d000ca9a20e73	patch
https://git.kernel.org/stable/c/2edb8aeb3cdda9d00ec4997252dc5bcd6f54d8ef	patch
https://git.kernel.org/stable/c/ce0c381199402a2c58f4599f4f6ed100d872d0da	patch
https://git.kernel.org/stable/c/866ac1d57040ed0b44ca732e3c66b3aa6b93011c	patch
https://git.kernel.org/stable/c/4d420d9ee70a220a2cd95aa0dd2e15acad66a505	patch
https://git.kernel.org/stable/c/9cceea8eeba710def2a5707ee00f00c74a9a1cac	patch
https://git.kernel.org/stable/c/cf48e75fc4fe0d5cc7721c82d454221d01367b93	patch
https://git.kernel.org/stable/c/2d8826a2d3657cea66fb0370f9e521575a673871	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.