CVE-2026-64089
kernel: batman-adv: tt: fix negative last_changeset_len
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's batman-adv module. An integer overflow vulnerability in the last_changeset_len field can cause it to become a negative value. This leads to a buffer being improperly initialized, potentially exposing sensitive information. A local attacker could exploit this to achieve information disclosure.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-190 · Integer Overflow or Wraparound