CVE-2026-72232

A flaw was found in the batman-adv component of the Linux kernel. A local user with extended Berkeley Packet Filter (eBPF) traffic control (TC) hook access could exploit this by attaching a TC filter that truncates a packet and redirects it to a batman-adv interface. The batadv_interface_tx() function then attempts to read beyond the allocated buffer for the Ethernet header, potentially leading to an out-of-bounds read. This could result in information disclosure or a denial of service.

This vulnerability is rated as having a Moderate impact because exploitation requires local access with specialized eBPF traffic control privileges to trigger an out-of-bounds read, limiting the blast radius to a localized denial of service or data leak. Standard Red Hat Enterprise Linux installations do not compile or enable the B.A.T.M.A.N. advanced mesh networking module, leaving default configurations unexposed. Consequently, systems running default kernels are unaffected unless a custom kernel build incorporating this networking subsystem is deployed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.