Linux Kernel Vulnerability in batman-adv Affecting Multiple Versions

CVE-2026-52922

What is CVE-2026-52922?

In the Linux kernel's batman-adv module, a vulnerability arises when the function batadv_dat_forward_data() attempts to duplicate a socket buffer (skb) for each Distributed Hash Table (DHT) candidate. If memory allocation fails during this duplication, the error is not handled appropriately, leading to a NULL pointer dereference when the function batadv_send_skb_prepare_unicast_4addr() is invoked with the faulty skb. This could potentially result in system instability or crashes due to the unguarded dereference.

References