CVE-2026-52922

batman-adv: dat: handle forward allocation error

High · published June 24, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: dat: handle forward allocation error

batadv_dat_forward_data() calls pskb_copy_for_clone() to duplicate an skb

for each DHT candidate, but does not check the return value before passing

it to batadv_send_skb_prepare_unicast_4addr(). That function dereferences

the skb unconditionally, so a failed allocation triggers a NULL pointer

dereference.

Skip forwarding to the current DHT candidate on allocation failure.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00389 · 31.8th percentile
Published
2026-06-24T07:14Z
EPSS history
Timeline
  • 24 JUN 07:14Z
    batman-adv: dat: handle forward allocation error
    cvelistv5