{"id":"CVE-2026-80599","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-80599","summary":"batman-adv: dat: ensure accessible eth_hdr proto field","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: dat: ensure accessible eth_hdr proto field\n\nWhen batadv_get_vid() accesses the proto field of the ethernet header, it\nis not checking if the data itself is accessible. The caller is responsible\nfor it. But in contrast to other call sites, batadv_dat_get_vid() and its\ncaller didn't make sure this is true. This could have caused an\nout-of-bounds access.","published":"2026-08-28T06:48:26.709Z","modified":"2026-08-30T03:48:20.809664216Z","cvss":{"score":8.1,"severity":"HIGH","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"5.10.261"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/26560c4a03dc4d607331600c187f59ab2df5f341"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3c62694c31f043568c3f4784b8d247cc3bea6b4c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4407ff3af469356f9641c4a6e7072309bae86bea"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5836a050d02e9598fa0f71e88dde28b63dfa35e3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d3ea37074bb747f745d28138f87745ba9bd97c5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7913935d41f166c367bbf7cc76a79e50044388e8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8f76277d02176cd739945bba3379448e2e22e799"},{"type":"WEB","url":"https://git.kernel.org/stable/c/da3677b5ed362742d30ceab31bfafcdc74dc2642"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80599.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80599"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-30T03:48:20.809664216Z"}}