The flaw in the batman‑adv driver causes a null pointer dereference when packet forwarding fails due to memory allocation errors. Because batadv_dat_forward_data() does not check the return value of pskb_copy_for_clone(), the subsequent batadv_send_skb_prepare_unicast_4addr() function dereferences a NULL pointer, leading to a kernel panic and a system crash. This defect is classified as CWE‑476 and results in a denial‑of‑service that could allow local attackers to disrupt network services and potentially elevate privileges if the crash forces a reboot of privileged processes.

The vulnerability affects the Linux kernel across all releases prior to the commit that added a NULL-check in batadv_dat_forward_data(). The impacted component is the batman‑adv networking driver within the kernel's network stack.

A CVSS score is not published, so the precise severity is uncertain, but the defect can bring a system to a failed state with a null pointer dereference. The bug can be triggered via crafted packets that cause a memory allocation failure during forwarding, so an attacker with packet injection capability can exploit it. Exploitability is moderate to high because the condition only requires forcing a kernel allocation failure, which is feasible in many network environments. The issue is not listed in CISA KEV and the EPSS score is not available, indicating no currently observed widespread exploitation but the risk remains high due to the critical nature of the crash.