CVE-2026-72231

A flaw was found in the batman-adv (Better Approach To Mobile Ad-hoc Networking) module of the Linux kernel. An incorrect check during the handling of TT (Topology Table) requests can prevent the proper cleanup of request nodes when send buffer allocation fails. This can lead to a remote attacker causing request storms, potentially resulting in a Denial of Service (DoS) condition.

A flaw with Moderate impact was found in the batman-adv (Better Approach To Mobile Ad-hoc Networking) module of the Linux kernel. batadv_send_tt_request() allocates a per-originator tt_req_node to prevent multiple translation table (TT) requests from being sent to the same originator at the same time, but an inverted boolean check tests for a successful send (ret == true) where the send-buffer allocation failure case (ret == false) must be handled, so the information about a pending TT request is lost directly after the request was attempted to be sent out. A remote attacker able to participate in a batman-adv mesh network could exploit this to trigger TT request storms, resulting in a denial of service. Red Hat Product Security rates this flaw Moderate (CVSS 3.1 score 5.5), while the upstream CVE record assigns a higher severity of Important (CVSS 3.1 score 7.5, using a network attack vector). All currently listed Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt streams are marked not affected for this flaw because the vulnerable code is not present in the shipped Red Hat kernel packages, so no update is required for Red Hat products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.