CVE-2026-89951
Vulnérabilité élevée dans Linux (Linux)
Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the skb from the highest-numbered buffered fragment as the merged packet. When that fragment was received on a hard interface which is deleted before the chain completes, the merged skb can re-enter the receive path with a stale skb->dev and skb_iif. batadv_batman_skb_recv() passes such merged packets through the normal receive handlers again. DAT and bridge loop avoidance both derive the ARP header length from skb->dev, so they can dereference the freed net_device before the packet reaches the local mesh interface. Refresh the receive device metadata from the current receive device before running the packet handlers. This keeps internally reinjected merged fragments consistent with the normal receive path after hard interface teardown.
Gravité et risque d'exploitation
CVE-2026-89951 obtient un score CVSS de 8.8/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.34 %, ce qui la place devant 26.4 % des CVE référencées.
Que faire ?
- Vérifiez si Linux (versions <=6.1.*, <=6.12.*, <a2c272da99c2077088083c14961cf2f1e4506995, 5.15.221, <3.13, 5.10.270, 0, 6.1.188, 610bfc6bc99bc83680d190ebc69359a05fc7f605, <63d86250fa7cbe22451369bd1c0881dfc8190958, 6.18.51, <=5.10.*, <=6.6.*, <e91d2cc7441d89a45bad73ad9789159c7441cb80, 7.2.5, <6df64825f8b199921120c685af2abca14b077331, 6.6.157, <=6.18.*, <f830c2dfc1431764db9256b3d5db1695fc9a7f56, 3.13, 6.12.110, <=7.2.*, <2dffc8c44b6e3347b3719c6419c07b4a18fea895, <f4b4ae763b5d59319fad62a00c76676758e7dafa, <=*, <=5.15.*, <ad46c907d7d9975a285c1e89a4adde652eaa93f5, 7.3) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.
Références
- https://git.kernel.org/stable/c/63d86250fa7cbe22451369bd1c0881dfc8190958
- https://git.kernel.org/stable/c/f830c2dfc1431764db9256b3d5db1695fc9a7f56
- https://git.kernel.org/stable/c/f4b4ae763b5d59319fad62a00c76676758e7dafa
- https://git.kernel.org/stable/c/6df64825f8b199921120c685af2abca14b077331
- https://git.kernel.org/stable/c/a2c272da99c2077088083c14961cf2f1e4506995
- https://git.kernel.org/stable/c/e91d2cc7441d89a45bad73ad9789159c7441cb80
- https://git.kernel.org/stable/c/2dffc8c44b6e3347b3719c6419c07b4a18fea895
- https://git.kernel.org/stable/c/ad46c907d7d9975a285c1e89a4adde652eaa93f5