{"id":"CVE-2026-72231","revision":"9ec04ca9328b4985ad0eec2426deec5b","records":[{"revision":"9ec04ca9328b4985ad0eec2426deec5b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-72231","aliases":[],"title":"batman-adv: tt: avoid request storms during pending request","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tt: avoid request storms during pending request\n\nbatadv_send_tt_request() allocates a tt_req_node when none exists for the\ndestination originator node. This should prevent that a multiple TT\nrequests are send at the same time to an originator.\n\nBut if allocation of the send buffer failed, this request must be cleaned\nup again. But indicator for such a failure is \"ret == false\". But the\nactual implementation is checking for \"ret == true\".\n\nThe check must be inverted to not loose the information about the TT\nrequest directly after it was attempted to be sent out. This should avoid\npotential request storms.","state":0,"publishedAt":"2026-08-15T05:54:22.076+00:00","modifiedAt":"2026-10-16T18:45:03.082+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/batman-adv/translation-table.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"335fbe0f5d2501b7dd815806aef6fd9bad784eb1\",\n                            \"lessThan\": \"6055695ea40c64a47e00742c12c99b1a33b4daed\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"335fbe0f5d2501b7dd815806aef6fd9bad784eb1\",\n                            \"lessThan\": \"21c44a6895f41df811d1c91d10eea194dda2b345\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"335fbe0f5d2501b7dd815806aef6fd9bad784eb1\",\n                            \"lessThan\": \"5e46c76d9a5062212c4c5f642a5549fd9c057f8a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"335fbe0f5d2501b7dd815806aef6fd9bad784eb1\",\n                            \"lessThan\": \"067e413eec2e63c2996909ef55214b3a0eda0be7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"335fbe0f5d2501b7dd815806aef6fd9bad784eb1\",\n                            \"lessThan\": \"716f434eb35869e130424331584a91fbb729b9bd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"335fbe0f5d2501b7dd815806aef6fd9bad784eb1\",\n                            \"lessThan\": \"6a65ac8a81e903bb4b555c1d13532f5cb0167a4a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"335fbe0f5d2501b7dd815806aef6fd9bad784eb1\",\n                            \"lessThan\": \"aba1cf21954e64c36afb966b754adad2b0b8aa48\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"335fbe0f5d2501b7dd815806aef6fd9bad784eb1\",\n                            \"lessThan\": \"27c7d40008231ae4140d35501b60087a9de2d2c3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/batman-adv/translation-table.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.13\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.261\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.212\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.145\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.97\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.40\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.5\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/6055695ea40c64a47e00742c12c99b1a33b4daed","https://git.kernel.org/stable/c/21c44a6895f41df811d1c91d10eea194dda2b345","https://git.kernel.org/stable/c/5e46c76d9a5062212c4c5f642a5549fd9c057f8a","https://git.kernel.org/stable/c/067e413eec2e63c2996909ef55214b3a0eda0be7","https://git.kernel.org/stable/c/716f434eb35869e130424331584a91fbb729b9bd","https://git.kernel.org/stable/c/6a65ac8a81e903bb4b555c1d13532f5cb0167a4a","https://git.kernel.org/stable/c/aba1cf21954e64c36afb966b754adad2b0b8aa48","https://git.kernel.org/stable/c/27c7d40008231ae4140d35501b60087a9de2d2c3"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72231","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-72231","identifiers":["CVE-2026-72231"]},"retained":false,"historicalAffected":[]}],"coverage":[]}