High 8.8Published Aug 28, 2026

CVE-2026-80601batman-adv: gw: acquire ethernet header only after skb realloc

Updated under an hour ago (Oct 27, 2026, 7:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an use-after-free.

CVSS: 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 16, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before 2760b38222c8828b075802342fe3b91eb823d542; 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 builds before 6c37f1166549c999ccd164b0cb6462d1ae68f8f6; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before b79884a5567bf788fb76c30832467cf6a56f3c0d; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before afac8096bde4948e3caa7e4dd733867cfbd3018e; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before e3f4325e35dd6e76b80665f3510738ce34819753; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before e6b43acd34b219b807e65096ce207b087942779d; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before 916dac5f2944f63f07f7b501acbea6737dbbed0e; from 6c413b1c22a2c4ef324f1c6f2c282f1ca10a93b9 before 77880a3be88d378d60cc1e8f8ec70430e2ed0518	CNA record

References

References

https://git.kernel.org/stable/c/2760b38222c8828b075802342fe3b91eb823d542
https://git.kernel.org/stable/c/6c37f1166549c999ccd164b0cb6462d1ae68f8f6
https://git.kernel.org/stable/c/b79884a5567bf788fb76c30832467cf6a56f3c0d
https://git.kernel.org/stable/c/afac8096bde4948e3caa7e4dd733867cfbd3018e
https://git.kernel.org/stable/c/e3f4325e35dd6e76b80665f3510738ce34819753
https://git.kernel.org/stable/c/e6b43acd34b219b807e65096ce207b087942779d
https://git.kernel.org/stable/c/916dac5f2944f63f07f7b501acbea6737dbbed0e
https://git.kernel.org/stable/c/77880a3be88d378d60cc1e8f8ec70430e2ed0518

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.