CVE-2026-72233

A flaw was found in the batman-adv component of the Linux kernel. This vulnerability occurs when a buffer is reallocated, but existing pointers are not updated, leading to a use-after-free condition. A local attacker could potentially exploit this to cause a system crash (denial of service) or, in some cases, execute arbitrary code with elevated privileges.

This vulnerability is rated as Moderate severity by Red Hat because exploitation demands local system access and primarily results in a kernel crash, rather than broader system compromise. In default Red Hat Enterprise Linux deployments, the B.A.T.M.A.N. advanced networking module is not enabled, significantly restricting practical exposure. Consequently, standard enterprise environments are not impacted unless custom kernel configurations or specialized mesh networking interfaces are actively utilized.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.