CVE-2026-64088

A flaw was found in the Linux kernel's batman-adv component. An integer overflow vulnerability exists where the 'tt_buff_len' variable, intended to be a positive length, can become a negative value. This occurs when a large value is assigned, causing it to wrap around. This incorrect negative value can lead to the allocation of a buffer that is not fully initialized, potentially resulting in information disclosure to an attacker.