The vulnerability resides in the batman‑adv implementation of the Linux kernel. When batadv_bla_is_backbone_gw() invokes pskb_may_pull(), the underlying socket buffer (skb) can be reallocated. Pointers that reference the original buffer are not refreshed, resulting in a use‑after‑free. This memory corruption can be leveraged by an attacker to execute arbitrary code at kernel privilege level or to crash the kernel, thereby compromising confidentiality, integrity, and availability of the affected system.

All Linux kernel releases containing the batman‑adv module are potentially impacted. No specific version ranges are listed, so systems running any recent kernel with batman‑adv enabled should be treated as vulnerable until a patch is applied.

The CVSS score is 8.8 and the EPSS score is < 1%, indicating a low but nonzero exploitation probability. The use‑after‑free flaw suggests a high potential for exploitation if an attacker can inject crafted network traffic. The vulnerability is not listed in the CISA KEV catalog, implying no confirmed public exploits as of this report. Administrators should consider the risk high and prioritize mitigation.