Not yet scoredPublished Aug 15, 2026

CVE-2026-72230batman-adv: frag: free unfragmentable packet

Updated under an hour ago (Oct 27, 2026, 6:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadv_frag_send_packet() assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error without any further actions. A failed pre-check must use the same error handling code as the rest of the function.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ee75ed88879af88558818a5c6609d85f60ff0df4 before a5155aeeae8ead3c6081f7f197608033e4dcfe75; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 04ccbed8179e7d4d0906d00939300ddc5b48ce7e; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 601dff01a03ecced59938cdd69eeb2c66e4158f2; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 740542f11bf8c86411c429fbd7f84fc6bee80e76; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 59e1da1ab354d1f2b7bab8d44f846262f990ad9d; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 8f54162e07d3eea1e4ff21464cf2a815d79b6510; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 08047838817561cef33ada9774a2a4663d499ecb; from ee75ed88879af88558818a5c6609d85f60ff0df4 before 6b628425aed49a1c7a4ffc997583840fc582d32b	CNA record

References

References

https://git.kernel.org/stable/c/a5155aeeae8ead3c6081f7f197608033e4dcfe75
https://git.kernel.org/stable/c/04ccbed8179e7d4d0906d00939300ddc5b48ce7e
https://git.kernel.org/stable/c/601dff01a03ecced59938cdd69eeb2c66e4158f2
https://git.kernel.org/stable/c/740542f11bf8c86411c429fbd7f84fc6bee80e76
https://git.kernel.org/stable/c/59e1da1ab354d1f2b7bab8d44f846262f990ad9d
https://git.kernel.org/stable/c/8f54162e07d3eea1e4ff21464cf2a815d79b6510
https://git.kernel.org/stable/c/08047838817561cef33ada9774a2a4663d499ecb
https://git.kernel.org/stable/c/6b628425aed49a1c7a4ffc997583840fc582d32b

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.