CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-72235: Linux 2.6.38

CVE-2026-72235. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00344 (percentile 0.263), scored 15-Oct-2026.

Affected technology

Linux · c6c8fea29769d998d94fcec9b9f14d4b52b349d3 to before 6e189f14d1ea28db212b9d70a02131a7ce518012, c6c8fea29769d998d94fcec9b9f14d4b52b349d3 to before a1820344b180cb55af748f102bc536b5c93164db, c6c8fea29769d998d94fcec9b9f14d4b52b349d3 to before 6abf73589bed3f27ee240c08108feb72bed0b9c6, c6c8fea29769d998d94fcec9b9f14d4b52b349d3 to before f19259395b44af67f3c274e34237c295b526b859, c6c8fea29769d998d94fcec9b9f14d4b52b349d3 to before 2cefa5141cab8ec1e4b24cf585958b13f2e3049d, c6c8fea29769d998d94fcec9b9f14d4b52b349d3 to before 85a71a81854e0e191ad0e533eabb4eff54866feb, c6c8fea29769d998d94fcec9b9f14d4b52b349d3 to before b031fc97e1993d29d6c3a0e86a99140528cf31e8, c6c8fea29769d998d94fcec9b9f14d4b52b349d3 to before 035e1fed892d3d06002a73ff73668f618a514644
Linux

Linux · 2.6.38
Linux

Component: Not specified by the source
File: net/batman-adv/mesh-interface.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
35.3 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00344 · percentile 0.263 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-72235.html