CVE-2026-72231

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-72231

Key Details

CVE	CVE-2026-72231
CVSS Score / Version	7.5 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: tt: avoid request storms during pending request

batadv_send_tt_request() allocates a tt_req_node when none exists for the

destination originator node. This should prevent that a multiple TT

requests are send at the same time to an originator.

But if allocation of the send buffer failed, this request must be cleaned

up again. But indicator for such a failure is "ret == false". But the

actual implementation is checking for "ret == true".

The check must be inverted to not loose the information about the TT

request directly after it was attempted to be sent out. This should avoid

potential request storms. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-72231
CVE	https://www.cve.org/CVERecord?id=CVE-2026-72231

Source

Reference

NVD

CVE