CVE-2026-52922
Description
A flaw was found in the Linux kernel's batman-adv (Better Approach To Mobile Ad-hoc Networking) module. This vulnerability occurs because the batadv_dat_forward_data() function fails to validate the success of a memory allocation operation. An attacker could exploit this by triggering a scenario where the memory allocation fails, leading to a NULL pointer dereference and causing the system to crash. This results in a Denial of Service (DoS).
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: Unexpected State; DoS: Crash, Exit, or Restart
An unexpected return value could place the system in a state that could lead to a crash or other unintended behaviors.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
