In the Linux kernel batman‑adv dat module, batadv_get_vid() accesses the protocol field of an Ethernet header without checking whether the packet data is accessible. This can cause the kernel to read memory outside the bounds of the packet, potentially leading to a kernel read of unintended data or a kernel crash.

All Linux kernel releases that include the batman‑adv networking module prior to the commit that fixes the issue are potentially affected. The affected product is the Linux kernel and the specific module is batman‑adv.

The CVSS score of 8.1 classifies this vulnerability as high severity. The EPSS score of <1% indicates a very low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. An attacker would need to send crafted network frames to a host running batman‑adv; if successful, the out‑of‑bounds read could expose unintended kernel memory or trigger a crash. No direct remote code execution or privilege escalation is described in the input.