HighFix available
batman-adv: dat: ensure accessible eth_hdr proto field
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto field When batadv_get_vid() accesses the proto field of the ethernet header, it is not checking if the data itself is accessible. The caller is responsible for it. But in contrast to other call sites, batadv_dat_get_vid() and its caller didn't make sure this is true. This could have caused an out-of-bounds access.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.261, 5.15.212, 6.1.178, 6.12.97, 6.18.40, 6.6.145, 7.1.5
- CVEs
- CVE-2026-80599
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 14:05 UTC · Revision 1
Source evidence
batman-adv: dat: ensure accessible eth_hdr proto field
core-osv · Original sourcePublished 28 Aug 2026, 06:48 UTC
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto field When batadv_get_vid() accesses the proto field of the ethernet header, it is not checking if the data itself is accessible. The caller is responsible for it. But in contrast to other call sites, batadv_dat_get_vid() and its caller didn't make sure this is true. This could have caused an out-of-bounds access.
osv:CVE-2026-80599
Kernel
Fixed versions: 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5
Complete source record
{
"id": "a2436c2101a20ed722b11c539c4467c6950116d46cd3eec8d6e17ba96dca865b",
"url": "https://osv.dev/vulnerability/CVE-2026-80599",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "batman-adv: dat: ensure accessible eth_hdr proto field",
"summary": "In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto field When batadv_get_vid() accesses the proto field of the ethernet header, it is not checking if the data itself is accessible. The caller is responsible for it. But in contrast to other call sites, batadv_dat_get_vid() and its caller didn't make sure this is true. This could have caused an out-of-bounds access.",
"evidence": "osv:CVE-2026-80599",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.261",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.212",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.178",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.145",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.97",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.40",
"evidence": "/affected/1/ranges"
},
{
"value": "7.1.5",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2026-80599",
"aliases": [
"CVE-2026-80599"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "be1db4f6615b5e6156c807ea8985171c215c2d57"
},
{
"fixed": "da3677b5ed362742d30ceab31bfafcdc74dc2642"
},
{
"fixed": "6d3ea37074bb747f745d28138f87745ba9bd97c5"
},
{
"fixed": "7913935d41f166c367bbf7cc76a79e50044388e8"
},
{
"fixed": "3c62694c31f043568c3f4784b8d247cc3bea6b4c"
},
{
"fixed": "5836a050d02e9598fa0f71e88dde28b63dfa35e3"
},
{
"fixed": "8f76277d02176cd739945bba3379448e2e22e799"
},
{
"fixed": "4407ff3af469356f9641c4a6e7072309bae86bea"
},
{
"fixed": "26560c4a03dc4d607331600c187f59ab2df5f341"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80599.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.13.0"
},
{
"fixed": "5.10.261"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.212"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.178"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.145"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.97"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.40"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.1.5"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80599.json"
}
}
],
"modified": "2026-10-28T02:30:35.848469530Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/26560c4a03dc4d607331600c187f59ab2df5f341",
"https://git.kernel.org/stable/c/3c62694c31f043568c3f4784b8d247cc3bea6b4c",
"https://git.kernel.org/stable/c/4407ff3af469356f9641c4a6e7072309bae86bea",
"https://git.kernel.org/stable/c/5836a050d02e9598fa0f71e88dde28b63dfa35e3",
"https://git.kernel.org/stable/c/6d3ea37074bb747f745d28138f87745ba9bd97c5",
"https://git.kernel.org/stable/c/7913935d41f166c367bbf7cc76a79e50044388e8",
"https://git.kernel.org/stable/c/8f76277d02176cd739945bba3379448e2e22e799",
"https://git.kernel.org/stable/c/da3677b5ed362742d30ceab31bfafcdc74dc2642",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80599.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80599",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80599.json"
}
},
"related_cves": [
{
"value": "CVE-2026-80599",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 503428,
"published_at": "2026-08-28T06:48:26.709+00:00"
}