CVE-2026-52914

kernel: batman-adv: fix fragment reassembly length accounting

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's batman-adv component. This vulnerability allows a local attacker to cause a denial of service (DoS) by sending malformed fragment chains. The flaw is due to incorrect accounting of fragment reassembly length, which can be truncated during updates, bypassing validation and leading to inconsistent length states during reassembly.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-130 · Improper Handling of Length Parameter Inconsistency