7.5

CVE-2026-52922: linux NULL Pointer Dereference

CVSS: 7.5v3.1HighAnalyzed
AliasesUBUNTU-CVE-2026-52922DEBIAN-CVE-2026-52922
Published 24-06-2026Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2026-52922 is a high (CVSS 7.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.5% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.39%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 47 · Related 47
OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1SUSE-SU-2026:23221-1

Timeline

  1. 24-06-2026
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error batadv_dat_forward_data() calls pskb_copy_for_clone() to duplicate an skb for each DHT candidate, but does not check the return value before passing it to batadv_send_skb_prepare_unicast_4addr(). That function dereferences the skb unconditionally, so a failed allocation triggers a NULL pointer dereference. Skip forwarding to the current DHT candidate on allocation failure.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.39%

Chance of exploitation in the next 30 days

Percentile

32%

Versus all other CVEs

30-day change

0.00 pp

From 0.39% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.39%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu167 products
  • linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-139.139 | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1064.67 | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 785ea1144182c341b8b85b0f8180291839d176a8, < 9bcebaedfb8479cb4affb23c7a0d000ca9a20e73 | ≥ 785ea1144182c341b8b85b0f8180291839d176a8, < 2edb8aeb3cdda9d00ec4997252dc5bcd6f54d8ef | ≥ 785ea1144182c341b8b85b0f8180291839d176a8, < ce0c381199402a2c58f4599f4f6ed100d872d0da | ≥ 785ea1144182c341b8b85b0f8180291839d176a8, < 866ac1d57040ed0b44ca732e3c66b3aa6b93011c | ≥ 785ea1144182c341b8b85b0f8180291839d176a8, < 4d420d9ee70a220a2cd95aa0dd2e15acad66a505 | ≥ 785ea1144182c341b8b85b0f8180291839d176a8, < 9cceea8eeba710def2a5707ee00f00c74a9a1cac | ≥ 785ea1144182c341b8b85b0f8180291839d176a8, < cf48e75fc4fe0d5cc7721c82d454221d01367b93 | ≥ 785ea1144182c341b8b85b0f8180291839d176a8, < 2d8826a2d3657cea66fb0370f9e521575a673871 | 3.8
  • linux_kernel≥ 3.8, < 5.10.258 | ≥ 5.11, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.142 | ≥ 6.7, < 6.12.92 | ≥ 6.13, < 6.18.34 | ≥ 6.19, < 7.0.11 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.12-1

3 vendors · 170 products

References

48 links
Show all 48 references