https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:35:34 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72232 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: ensure minimal ethernet header on TX</p> <p>As documented in commit 8bd67ebb50c0 (&#34;net: bridge: xmit: make sure we have at least eth header len bytes&#34;), it is possible by for a local user with eBPF TC hook access to attach a tc filter which truncates the packet and redirects to an batadv interface. But the code assumes that at least ETH_HLEN bytes are available and thus might read outside of the available buffer.</p> <p>The batadv_interface_tx() must therefore always check itself if enough data is available for the ethernet header and don&#39;t rely on min_header_len.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: ensure minimal ethernet header on TX</p> <p>As documented in commit 8bd67ebb50c0 (&#34;net: bridge: xmit: make sure we have at least eth header len bytes&#34;), it is possible by for a local user with eBPF TC hook access to attach a tc filter which truncates the packet and redirects to an batadv interface. But the code assumes that at least ETH_HLEN bytes are available and thus might read outside of the available buffer.</p> <p>The batadv_interface_tx() must therefore always check itself if enough data is available for the ethernet header and don&#39;t rely on min_header_len.</p> https://vulnerability.circl.lu/vuln/cve-2026-72232