batman‑adv attempts to linearize an sk_buff that has a frag_list before splitting it. If the linearization fails, the original code frees the sk_buff but does not release the reference to the previously identified primary_if. This oversight leaves a dangling reference that can result in a memory leak or kernel memory corruption. An entity that can trigger this failure path may be able to cause a kernel crash, leading to denial of service.

All Linux kernel installations that include the batman‑adv networking extension are potentially impacted. The advisory does not list specific kernel versions, so any distribution shipping with batman‑adv and an unpatched linearization routine may be affected.

The CVSS score is 5.5, and the EPSS score is < 1%, so a quantitative risk estimate can be made. The defect is triggered by network traffic that contains packet fragments, so the likely attack vector is network‑based. The vulnerability is not listed in the CISA KEV catalog, indicating no publicly known exploit at this time. Security teams should consider the risk moderate to high for systems exposed to external networks, given the potential for kernel memory corruption and denial of service.