CVE-2026-89949 - Vulnerability Details

- batman-adv: dat: avoid unaligned fault in IP extraction

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: dat: avoid unaligned fault in IP extraction

Independent of the alignment of the ARP packet in the SKB, either the
batadv_arp_ip_src or the batadv_arp_ip_dst will have an unaligned access
(on HW without native unaligned read support).

Use get_unaligned() to handle this properly on all architectures.

Published: 2026-09-16

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`5c3a0e5535933349a5d6e6bc8b704e0611f21d3f`	affected	< b1bbc694ca51adb8dbed3f3235b4fcbdb44e0e20
`5c3a0e5535933349a5d6e6bc8b704e0611f21d3f`	affected	< 15dbfb37f0e1a085d48deeb8f5238e9d28127dde
`5c3a0e5535933349a5d6e6bc8b704e0611f21d3f`	affected	< a170d4617e8cca05a1314de61728a262ef272782
`5c3a0e5535933349a5d6e6bc8b704e0611f21d3f`	affected	< c74a4acf41d19f21199dec2d6c813c90d31cd02c
`5c3a0e5535933349a5d6e6bc8b704e0611f21d3f`	affected	< 91c99b4e152023c7d458a5dedd52d2b0d7df4ce3
`5c3a0e5535933349a5d6e6bc8b704e0611f21d3f`	affected	< 1cfa7d5f70d54cb8c7e82df739430782d1996ee1
`5c3a0e5535933349a5d6e6bc8b704e0611f21d3f`	affected	< 0c2df865338bbf92aa45b9253e5f9b8ef2d9992f
`5c3a0e5535933349a5d6e6bc8b704e0611f21d3f`	affected	< 0121afa52cdb88cfb4d5d7bd126a23a9100121d8

Linux

affected

Version	Status	Constraints
`3.8`	affected	—
`0`	unaffected	< 3.8
`5.10.270`	unaffected	≤ 5.10.*
`5.15.221`	unaffected	≤ 5.15.*
`6.1.188`	unaffected	≤ 6.1.*
`6.6.157`	unaffected	≤ 6.6.*
`6.12.110`	unaffected	≤ 6.12.*
`6.18.51`	unaffected	≤ 6.18.*
`7.2.5`	unaffected	≤ 7.2.*
`7.3-rc1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[5c3a0e5535933349a5d6e6bc8b704e0611f21d3f,b1bbc694ca51adb8dbed3f3235b4fcbdb44e0e20)`	affected	code_commit	—
`[5c3a0e5535933349a5d6e6bc8b704e0611f21d3f,15dbfb37f0e1a085d48deeb8f5238e9d28127dde)`	affected	code_commit	—
`[5c3a0e5535933349a5d6e6bc8b704e0611f21d3f,a170d4617e8cca05a1314de61728a262ef272782)`	affected	code_commit	—
`[5c3a0e5535933349a5d6e6bc8b704e0611f21d3f,c74a4acf41d19f21199dec2d6c813c90d31cd02c)`	affected	code_commit	—
`[5c3a0e5535933349a5d6e6bc8b704e0611f21d3f,91c99b4e152023c7d458a5dedd52d2b0d7df4ce3)`	affected	code_commit	—
`[5c3a0e5535933349a5d6e6bc8b704e0611f21d3f,1cfa7d5f70d54cb8c7e82df739430782d1996ee1)`	affected	code_commit	—
`[5c3a0e5535933349a5d6e6bc8b704e0611f21d3f,0c2df865338bbf92aa45b9253e5f9b8ef2d9992f)`	affected	code_commit	—
`[5c3a0e5535933349a5d6e6bc8b704e0611f21d3f,0121afa52cdb88cfb4d5d7bd126a23a9100121d8)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`3.8`	affected	generic	—
`[0,3.8)`	unaffected	generic	—
`[5.10.270,5.11.0)`	unaffected	semver	—
`[5.15.221,5.16.0)`	unaffected	semver	—
`[6.1.188,6.2.0)`	unaffected	semver	—
`[6.6.157,6.7.0)`	unaffected	semver	—
`[6.12.110,6.13.0)`	unaffected	semver	—
`[6.18.51,6.19.0)`	unaffected	semver	—
`[7.2.5,7.3.0)`	unaffected	semver	—
`[7.3-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00211.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0121afa52cdb88cfb4d5d7bd126a23a9100121d8
https://git.kernel.org/stable/c/0c2df865338bbf92aa45b9253e5f9b8ef2d9992f
https://git.kernel.org/stable/c/15dbfb37f0e1a085d48deeb8f5238e9d28127dde
https://git.kernel.org/stable/c/1cfa7d5f70d54cb8c7e82df739430782d1996ee1
https://git.kernel.org/stable/c/91c99b4e152023c7d458a5dedd52d2b0d7df4ce3
https://git.kernel.org/stable/c/a170d4617e8cca05a1314de61728a262ef272782
https://git.kernel.org/stable/c/b1bbc694ca51adb8dbed3f3235b4fcbdb44e0e20
https://git.kernel.org/stable/c/c74a4acf41d19f21199dec2d6c813c90d31cd02c

History

Fri, 18 Sep 2026 08:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-673

Wed, 16 Sep 2026 10:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadv_arp_ip_src or the batadv_arp_ip_dst will have an unaligned access (on HW without native unaligned read support). Use get_unaligned() to handle this properly on all architectures.
Title		batman-adv: dat: avoid unaligned fault in IP extraction
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0121afa52cdb88cfb4d5d7bd126a23a9100121d8 https://git.kernel.org/stable/c/0c2df865338bbf92aa45b9253e5f9b8ef2d9992f https://git.kernel.org/stable/c/15dbfb37f0e1a085d48deeb8f5238e9d28127dde https://git.kernel.org/stable/c/1cfa7d5f70d54cb8c7e82df739430782d1996ee1 https://git.kernel.org/stable/c/91c99b4e152023c7d458a5dedd52d2b0d7df4ce3 https://git.kernel.org/stable/c/a170d4617e8cca05a1314de61728a262ef272782 https://git.kernel.org/stable/c/b1bbc694ca51adb8dbed3f3235b4fcbdb44e0e20 https://git.kernel.org/stable/c/c74a4acf41d19f21199dec2d6c813c90d31cd02c

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-16T10:32:34.794Z

Updated: 2026-09-16T10:32:34.794Z

Reserved: 2026-09-11T19:38:34.777Z

Link: CVE-2026-89949

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-16T11:17:05.030

Modified: 2026-09-16T11:17:05.030

Link: CVE-2026-89949

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-09-18T07:45:05Z

Weaknesses

CWE-673
External Influence of Sphere Definition

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object