A critical use-after-free vulnerability in the Linux kernel batman-adv module could allow an unauthenticated attacker to cause system crashes or potentially execute arbitrary code.

The vulnerability exists within the batman-adv driver, where the pskb_may_pull function triggers a buffer reallocation that invalidates existing pointers. This flaw allows an unauthenticated attacker to trigger a use-after-free condition by manipulating skb buffers.

The exploitation of this vulnerability poses a severe risk to system integrity and availability. Because the Linux kernel manages core system operations, a successful exploit could result in full system compromise, unauthorized data access, or persistent denial of service. The CVSS score of 9.8 reflects the high potential for remote exploitation without requiring authentication, making this a critical priority for infrastructure security.

Immediate Action: Update the Linux kernel to the latest stable release (at least 5.10.261, 5.15.212, 6.1.178, or 6.6.145) immediately to incorporate the provided upstream patches.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected service restarts, which may indicate memory corruption attempts associated with this vulnerability.

Compensating Controls: If patching is not immediately feasible, restrict network access to the batman-adv interface or disable the module if it is not required for network operations to reduce the attack surface.

Public Exploit Available: Unknown

This vulnerability represents a significant risk due to its location in the kernel and the potential for unauthenticated exploitation. IT and security administrators must prioritize patching affected Linux distributions to the specified versions or newer to prevent potential system compromise.