Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-52916

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: disallow unicast fragment in fragment batadv_frag_skb_buffer() is called by batadv_batman_skb_recv() when a BATADV_UNICAST_FRAG packet is received. Once all fragments are collected and the packet is reassembled, batadv_recv_frag_packet() calls batadv_batman_skb_recv() again to process the defragmented payload. A malicious sender can craft a BATADV_UNICAST_FRAG packet whose reassembled payload is itself a BAT
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8f2676429deb92cc860415f8e0591ae90a00c855a55e77b8f5321ce713219b4f
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/fragmentation.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.13"},{"lessThan":"3.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/fragmentation.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0c208fa3859e3a33a1c38bebc41d021166e94ac8","status":"affected","version":"610bfc6bc99bc83680d190ebc69359a05fc7f605","versionType":"git"},{"lessThan":"bcda4814dc6524283c0b958882cb963d75fe411d","status":"affected","version":"610bfc6bc99bc83680d190ebc69359a05fc7f605","versionType":"git"},{"lessThan":"aea54d0bbe156d5ab7d00d68f66149ff41f4612a","status":"affected","version":"610bfc6bc99bc83…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/fragmentation.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.13"},{"lessThan":"3.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/fragmentation.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0c208fa3859e3a33a1c38bebc41d021166e94ac8","status":"affected","version":"610bfc6bc99bc83680d190ebc69359a05fc7f605","versionType":"git"},{"lessThan":"bcda4814dc6524283c0b958882cb963d75fe411d","status":"affected","version":"610bfc6bc99bc83680d190ebc69359a05fc7f605","versionType":"git"},{"lessThan":"aea54d0bbe156d5ab7d00d68f66149ff41f4612a","status":"affected","version":"610bfc6bc99bc83…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0c208fa3859e3a33a1c38bebc41d021166e94ac8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/5418be6c2e117bf8a316582795a8e3ff90f45e5d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/5895ad21c7059a652da83fb817510f7a1e962abf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/7138c35c9ad39a2fca6264af6b87466471f04ffc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/aea54d0bbe156d5ab7d00d68f66149ff41f4612a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b54e459cf86943583c1aa2ee3081874e7ab1f5f3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/bc62216dc8e221e3781afa14430f45208bfa9af9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/bcda4814dc6524283c0b958882cb963d75fe411d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8d182a1b31b02e9aea68f1446c32efd0a7198cd692ee2fb6919a39541dbfe88a · sha256:831a2088d4124998… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer