CVE Database›Document archive›CVE-2026-52934

CVE-2026-52934

kernel: batman-adv: tvlv: reject oversized TVLV packets

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's batman-adv (Better Approach To Mobile Ad-hoc Networking - Advanced) module. An integer overflow vulnerability in the TVLV (Type-Length-Value) packet processing can lead to an undersized memory allocation. This allows a subsequent operation to write beyond the intended buffer, causing kernel memory corruption. This issue could potentially be exploited by an attacker to achieve a denial of service or, in some cases, arbitrary code execution.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-190 · Integer Overflow or Wraparound