CVE-2026-31659

kernel: batman-adv: reject oversized global TT response buffers

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the batman-adv component of the Linux kernel. A remote attacker can exploit this vulnerability by sending a specially crafted oversized global Topology Table (TT) response. This causes an integer overflow during memory allocation, leading to a heap overflow and memory corruption. This memory corruption could potentially result in a denial of service or other unpredictable system behavior.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-190 · Integer Overflow or Wraparound