The vulnerability resides in the Linux kernel's batman‑adv component, specifically within the ARP handling routine. A call to pskb_may_pull() while fetching the virtual interface ID can reallocate the socket buffer, leaving dangling pointers that lead to a use‑after‑free scenario. This memory corruption can crash the kernel or result in other kernel memory corruption, disrupting ongoing operations.

Affected systems are Linux kernels that implement batman‑adv. The exact kernel version range is not specified in the CVE data, and therefore any system running a kernel that includes the batman‑adv code prior to the fix is potentially vulnerable. The vendor is the Linux kernel project and the product is the core kernel, lacking a more granular version list in the present description.

The CVSS score of 9.8 indicates a critical severity assessment. The EPSS score is < 1%, indicating low but nonzero exploitation probability, and the vulnerability is not listed in the CISA KEV catalog, but it remains a critical risk for networks that rely on the batman‑adv virtualization stack. The likely attack vector is remote, using crafted network traffic that targets the batman‑adv interface to trigger the buffer reallocation. The kernel crash or memory corruption can disrupt system availability, and could potentially be leveraged for further compromise if the attacker can influence kernel memory state. Immediate remediation is strongly recommended.