---
id: CVE-2026-72231
title: >-
  kernel: batman-adv: tt: avoid request storms during pending request
  (CVE-2026-72231)
summary: >-
  A flaw was found in the batman-adv (Better Approach To Mobile Ad-hoc
  Networking) module of the Linux kernel. An incorrect check during the handling
  of TT (Topology Table) requests can prevent the proper cleanup of request
  nodes when send b…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe: CWE-772
vendor: Red Hat
product: Linux
affected:
  - >-
    Linux >= 335fbe0f5d2501b7dd815806aef6fd9bad784eb1 <
    6055695ea40c64a47e00742c12c99b1a33b4daed
  - >-
    Linux >= 335fbe0f5d2501b7dd815806aef6fd9bad784eb1 <
    21c44a6895f41df811d1c91d10eea194dda2b345
  - >-
    Linux >= 335fbe0f5d2501b7dd815806aef6fd9bad784eb1 <
    5e46c76d9a5062212c4c5f642a5549fd9c057f8a
  - >-
    Linux >= 335fbe0f5d2501b7dd815806aef6fd9bad784eb1 <
    067e413eec2e63c2996909ef55214b3a0eda0be7
  - >-
    Linux >= 335fbe0f5d2501b7dd815806aef6fd9bad784eb1 <
    716f434eb35869e130424331584a91fbb729b9bd
  - >-
    Linux >= 335fbe0f5d2501b7dd815806aef6fd9bad784eb1 <
    6a65ac8a81e903bb4b555c1d13532f5cb0167a4a
  - >-
    Linux >= 335fbe0f5d2501b7dd815806aef6fd9bad784eb1 <
    aba1cf21954e64c36afb966b754adad2b0b8aa48
  - >-
    Linux >= 335fbe0f5d2501b7dd815806aef6fd9bad784eb1 <
    27c7d40008231ae4140d35501b60087a9de2d2c3
  - Linux 3.13
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T23:13:06+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72231.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72231.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-72231'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2516403'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-72231'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-72231'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2026081549-CVE-2026-72231-bfeb@gregkh/T
  - url: 'https://git.kernel.org/stable/c/6055695ea40c64a47e00742c12c99b1a33b4daed'
  - url: 'https://git.kernel.org/stable/c/21c44a6895f41df811d1c91d10eea194dda2b345'
  - url: 'https://git.kernel.org/stable/c/5e46c76d9a5062212c4c5f642a5549fd9c057f8a'
  - url: 'https://git.kernel.org/stable/c/067e413eec2e63c2996909ef55214b3a0eda0be7'
  - url: 'https://git.kernel.org/stable/c/716f434eb35869e130424331584a91fbb729b9bd'
  - url: 'https://git.kernel.org/stable/c/6a65ac8a81e903bb4b555c1d13532f5cb0167a4a'
  - url: 'https://git.kernel.org/stable/c/aba1cf21954e64c36afb966b754adad2b0b8aa48'
  - url: 'https://git.kernel.org/stable/c/27c7d40008231ae4140d35501b60087a9de2d2c3'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
  - score-dispute
epss: 0.00677
epssPercentile: 0.51345
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-16T18:44:21.954834Z'
scores:
  vendor: 5.5
  cna: 7.5
ingestedAt: '2026-10-16T19:46:24.419Z'
---

## Overview

A flaw was found in the batman-adv (Better Approach To Mobile Ad-hoc Networking) module of the Linux kernel. An incorrect check during the handling of TT (Topology Table) requests can prevent the proper cleanup of request nodes when send buffer allocation fails. This can lead to a remote attacker causing request storms, potentially resulting in a Denial of Service (DoS) condition.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72231.json)

**kernel: batman-adv: tt: avoid request storms during pending request** — rated Moderate by Red Hat. Released 2026-08-15, updated 2026-10-16.

Not affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9

## Remediation

Refer to the advisory for fix availability.