In the Linux kernel, the following vulnerability has been resolved:

batman-adv: access unicast_ttvn skb->data only after skb realloc

The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer
behind the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an use-after-free.

This was done correctly for the ethernet header but missed for the
unicast_packet pointer.

https://git.kernel.org/stable/c/7141990add3f75436f2933cb310654cad3b1e3e9

https://git.kernel.org/stable/c/7b162b36de750565404cd3b98315706622c6974f

https://git.kernel.org/stable/c/979175834a699ccc3c4c0b0ba60ecae0f135a587

https://git.kernel.org/stable/c/9a7b7248798123efbd5fafe58461d57c7cc718af

https://git.kernel.org/stable/c/9c2c05629e46c1fd43931506d41c56a885a98eb4

https://git.kernel.org/stable/c/aa9558af859934f24717d4bab97d61004f91a736

https://git.kernel.org/stable/c/b8afcf799b2cc92c41beebd029e53ed18960184a

https://git.kernel.org/stable/c/ed90eb5c68420cdfe67ec1f773324198d2ef6f50

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/batman-adv/routing.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"c018ad3de61a1dc4194879a53e5559e094aa7b1a","lessThan":"aa9558af859934f24717d4bab97d61004f91a736","versionType":"git","status":"affected"},{"version":"c018ad3de61a1dc4194879a53e5559e094aa7b1a","lessThan":"9c2c05629e46c1fd43931506d41c56a885a98eb4","versionType":"git","status":"affected"},{"version":"c018ad3de61a1dc4194879a53e5559e094aa7b1a","lessThan":"7b162b36de750565404cd3b98315706622c6974f","versionType":"git","status":"affected"},{"version":"c018ad3de61a1dc4194879a53e5559e094aa7b1a","lessThan":"ed90eb5c68420cdfe67ec1f773324198d2ef6f50","versionType":"git","status":"affected"},{"version":"c018ad3de61a1dc4194879a53e5559e094aa7b1a","lessThan":"979175834a699ccc3c4c0b0ba60ecae0f135a587","versionType":"git","status":"affected"},{"version":"c018ad3de61a1dc4194879a53e5559e094aa7b1a","lessThan":"b8afcf799b2cc92c41beebd029e53ed18960184a","versionType":"git","status":"affected"},{"version":"c018ad3de61a1dc4194879a53e5559e094aa7b1a","lessThan":"9a7b7248798123efbd5fafe58461d57c7cc718af","versionType":"git","status":"affected"},{"version":"c018ad3de61a1dc4194879a53e5559e094aa7b1a","lessThan":"7141990add3f75436f2933cb310654cad3b1e3e9","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/batman-adv/routing.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3.13","status":"affected"},{"version":"0","lessThan":"3.13","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.97","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]