In the Linux kernel, the following vulnerability has been resolved:

batman-adv: retrieve ethhdr after potential skb realloc on RX

pskb_may_pull() in batadv_interface_rx() could reallocate the buffer behind
the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an use-after-free.

This was done correctly for the VLAN header but missed for the ethernet
header which is later used for the TT and AP isolation handling.

https://git.kernel.org/stable/c/035e1fed892d3d06002a73ff73668f618a514644

https://git.kernel.org/stable/c/2cefa5141cab8ec1e4b24cf585958b13f2e3049d

https://git.kernel.org/stable/c/6abf73589bed3f27ee240c08108feb72bed0b9c6

https://git.kernel.org/stable/c/6e189f14d1ea28db212b9d70a02131a7ce518012

https://git.kernel.org/stable/c/85a71a81854e0e191ad0e533eabb4eff54866feb

https://git.kernel.org/stable/c/a1820344b180cb55af748f102bc536b5c93164db

https://git.kernel.org/stable/c/b031fc97e1993d29d6c3a0e86a99140528cf31e8

https://git.kernel.org/stable/c/f19259395b44af67f3c274e34237c295b526b859

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/batman-adv/mesh-interface.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"c6c8fea29769d998d94fcec9b9f14d4b52b349d3","lessThan":"6e189f14d1ea28db212b9d70a02131a7ce518012","versionType":"git","status":"affected"},{"version":"c6c8fea29769d998d94fcec9b9f14d4b52b349d3","lessThan":"a1820344b180cb55af748f102bc536b5c93164db","versionType":"git","status":"affected"},{"version":"c6c8fea29769d998d94fcec9b9f14d4b52b349d3","lessThan":"6abf73589bed3f27ee240c08108feb72bed0b9c6","versionType":"git","status":"affected"},{"version":"c6c8fea29769d998d94fcec9b9f14d4b52b349d3","lessThan":"f19259395b44af67f3c274e34237c295b526b859","versionType":"git","status":"affected"},{"version":"c6c8fea29769d998d94fcec9b9f14d4b52b349d3","lessThan":"2cefa5141cab8ec1e4b24cf585958b13f2e3049d","versionType":"git","status":"affected"},{"version":"c6c8fea29769d998d94fcec9b9f14d4b52b349d3","lessThan":"85a71a81854e0e191ad0e533eabb4eff54866feb","versionType":"git","status":"affected"},{"version":"c6c8fea29769d998d94fcec9b9f14d4b52b349d3","lessThan":"b031fc97e1993d29d6c3a0e86a99140528cf31e8","versionType":"git","status":"affected"},{"version":"c6c8fea29769d998d94fcec9b9f14d4b52b349d3","lessThan":"035e1fed892d3d06002a73ff73668f618a514644","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/batman-adv/mesh-interface.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.38","status":"affected"},{"version":"0","lessThan":"2.6.38","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.97","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]