CVE-2026-72230 Linux CVE debrief

Who should care

Linux kernel users, administrators, and developers using the batman-adv module should be aware of this vulnerability and ensure their systems are updated. Additionally, security teams and vulnerability management teams should review the vulnerability and assess potential exposure. Operators and platform administrators should also be aware of the vulnerability and its potential impact on their systems.

Technical summary

The Linux kernel's batman-adv module had a vulnerability related to handling unfragmentable packets. The issue was resolved through a series of kernel commits, ensuring that error handling is properly performed when pre-checks fail. The vulnerability was introduced due to the caller's assumption that the skb provided to the batadv_frag_send_packet() function are always consumed. However, the pre-check for an empty payload or the zero fragment size returned an error without any further actions. A failed pre-check must use the same error handling code as the rest of the function.

Defensive priority

Linux kernel users should verify their systems are updated with the latest batman-adv module to ensure vulnerability resolution.

Recommended defensive actions

• Verify Linux kernel updates are applied
• Review system configurations for batman-adv module usage
• Monitor system logs for related issues
• Perform vulnerability assessment to identify potential exposure
• Implement compensating controls for exposed systems
• Conduct asset inventory to identify affected systems
• Track exceptions and retest remediated assets

Evidence notes

The Linux kernel's batman-adv module had a vulnerability related to handling unfragmentable packets. The issue was resolved through a series of kernel commits, ensuring that error handling is properly performed when pre-checks fail. This vulnerability affects Linux kernel users, particularly those using the batman-adv module. To verify the vulnerability resolution, defenders should review system configurations, monitor system logs for related issues, and ensure their systems are updated with the latest batman-adv module.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.