CVE-2026-80599
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/08/2026
Last modified:
28/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
batman-adv: dat: ensure accessible eth_hdr proto field<br />
<br />
When batadv_get_vid() accesses the proto field of the ethernet header, it<br />
is not checking if the data itself is accessible. The caller is responsible<br />
for it. But in contrast to other call sites, batadv_dat_get_vid() and its<br />
caller didn&#39;t make sure this is true. This could have caused an<br />
out-of-bounds access.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/26560c4a03dc4d607331600c187f59ab2df5f341
- https://git.kernel.org/stable/c/3c62694c31f043568c3f4784b8d247cc3bea6b4c
- https://git.kernel.org/stable/c/4407ff3af469356f9641c4a6e7072309bae86bea
- https://git.kernel.org/stable/c/5836a050d02e9598fa0f71e88dde28b63dfa35e3
- https://git.kernel.org/stable/c/6d3ea37074bb747f745d28138f87745ba9bd97c5
- https://git.kernel.org/stable/c/7913935d41f166c367bbf7cc76a79e50044388e8
- https://git.kernel.org/stable/c/8f76277d02176cd739945bba3379448e2e22e799
- https://git.kernel.org/stable/c/da3677b5ed362742d30ceab31bfafcdc74dc2642



