Description
The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted batman-adv ICMP packet.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | batmand | No fix yet | — |
| Ubuntu 26.04 LTS | batmand | No fix yet | — |
| Ubuntu 25.10 | batmand | No fix yet | — |
| Ubuntu 24.04 LTS | batmand | No fix yet | — |
| Ubuntu 22.04 LTS | batmand | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | batmand | No fix yet | — |
| Ubuntu 18.04 LTS | batmand | No fix yet | — |
| Ubuntu 16.04 LTS | batmand | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 4.8.13-1.1 | openSUSE-SU-2024:10128-1 |
Advisories 1
- openSUSE-SU-2024:10128-1 kernel-debug-4.8.13-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [oss-security] 20111211 Fwd: Re: cve request: bat_socket_read memory corruption mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=767495
- [b.a.t.m.a.n] 20111210 bat_socket_read missing checks mailing-list
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5a1eeef04cc7859f34dec9b72ea1b28e4aba07c
- http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.3.bz2
- openSUSE-SU-2013:0925 vendor-advisory
- https://github.com/torvalds/linux/commit/b5a1eeef04cc7859f34dec9b72ea1b28e4aba07c