{"apiVersion":"1.0","identifier":"CVE-2026-72232","description":"In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 (-net: bridge: xmit: make sure we have at least eth header len bytes-), it is possible by for a local user with eBPF TC hook access to attach a tc filter which truncates the packet and redirects to an batadv interface. But the code assumes that at least ETH_HLEN bytes are available and thus might read outside of the available buffer. The batadv_interface_tx() must therefore always check itself if enough data is available for the ethernet header and don-t rely on min_header_len.","publishedAt":"2026-08-15T06:21:50","lastModifiedAt":"2026-08-17T06:18:24","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72232","cvssScore":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00156,"riskScore":0.79,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72232","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72232","en":"https://www.redsauce.net/en/cves/CVE-2026-72232","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72232","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72232","de":"https://www.redsauce.net/de/cves/CVE-2026-72232","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72232","el":"https://www.redsauce.net/el/cves/CVE-2026-72232"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72232"}}