CVE-2026-80599

A flaw was found in the Linux kernel's batman-adv (Better Approach To Mobile Ad-hoc Networking - Advanced) module. An attacker, by sending specially crafted network packets, could trigger an out-of-bounds memory access in the batadv_get_vid() function. This occurs because the function fails to verify the accessibility of the ethernet header's protocol field, potentially leading to system instability or information disclosure.

A moderate-impact out-of-bounds read flaw was found in the Linux kernel's batman-adv (Better Approach To Mobile Ad-hoc Networking - Advanced) Distributed ARP Table (DAT) implementation. When processing specially crafted network packets, the batadv_get_vid() function accesses the protocol field of the Ethernet header without first verifying that the header data is accessible, which could cause an out-of-bounds memory access. Successful exploitation could crash the kernel, resulting in a denial of service, or potentially expose sensitive information. Red Hat rated this flaw Moderate severity (CVSS 5.5), which differs from the CVE.org score of Important (8.1): the Red Hat CVSS vector scores the issue with a local attack vector and availability-only impact, whereas the CVE.org vector uses an adjacent-network attack vector with high confidentiality and availability impact. All Red Hat products in scope for this flaw - Red Hat Enterprise Linux 6, 7, 8, 9, and 10 (kernel and kernel-rt) and Red Hat In-Vehicle OS - are not affected because the vulnerable code is not present in the shipped kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.