CVE Database›Document archive›CVE-2026-64090

CVE-2026-64090

kernel: batman-adv: tt: avoid empty VLAN responses

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's batman-adv (Better Approach To Mobile Ad-hoc Networking - Advanced) translation table module. This vulnerability could allow an attacker to cause network instability or a denial of service (DoS). The issue arises from the system sending inconsistent translation table type-length-value (TLVs) and empty VLAN responses, which can lead to 'TT request storms' within the network. The resolution prevents the sending of empty VLANs for replies, mitigating the risk of these inconsistencies.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-770 · Allocation of Resources Without Limits or Throttling