{"id":"CVE-2026-80599","summary":"batman-adv: dat: ensure accessible eth_hdr proto field","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: dat: ensure accessible eth_hdr proto field\n\nWhen batadv_get_vid() accesses the proto field of the ethernet header, it\nis not checking if the data itself is accessible. The caller is responsible\nfor it. But in contrast to other call sites, batadv_dat_get_vid() and its\ncaller didn't make sure this is true. This could have caused an\nout-of-bounds access.","modified":"2026-08-31T03:30:47.986372207Z","published":"2026-08-28T06:48:26.709Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80599.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/26560c4a03dc4d607331600c187f59ab2df5f341"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3c62694c31f043568c3f4784b8d247cc3bea6b4c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4407ff3af469356f9641c4a6e7072309bae86bea"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5836a050d02e9598fa0f71e88dde28b63dfa35e3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d3ea37074bb747f745d28138f87745ba9bd97c5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7913935d41f166c367bbf7cc76a79e50044388e8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8f76277d02176cd739945bba3379448e2e22e799"},{"type":"WEB","url":"https://git.kernel.org/stable/c/da3677b5ed362742d30ceab31bfafcdc74dc2642"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80599.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80599"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"be1db4f6615b5e6156c807ea8985171c215c2d57"},{"fixed":"da3677b5ed362742d30ceab31bfafcdc74dc2642"},{"fixed":"6d3ea37074bb747f745d28138f87745ba9bd97c5"},{"fixed":"7913935d41f166c367bbf7cc76a79e50044388e8"},{"fixed":"3c62694c31f043568c3f4784b8d247cc3bea6b4c"},{"fixed":"5836a050d02e9598fa0f71e88dde28b63dfa35e3"},{"fixed":"8f76277d02176cd739945bba3379448e2e22e799"},{"fixed":"4407ff3af469356f9641c4a6e7072309bae86bea"},{"fixed":"26560c4a03dc4d607331600c187f59ab2df5f341"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80599.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.13.0"},{"fixed":"5.10.261"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80599.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"}]}