SB20260425183 - Heap-based buffer overflow in Linux kernel batman-adv
Published: April 25, 2026
Security Bulletin ID
SB20260425183
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Heap-based buffer overflow (CVE-ID: CVE-2026-31683)
CWE-ID: CWE-122 - Heap-based Buffer Overflow
CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a buffer overflow in batman-adv OGM aggregation handling when aggregating forwarded packets after OGM aggregation state is toggled at runtime. A local user can trigger aggregation with insufficient skb tailroom to cause a denial of service.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1
- https://git.kernel.org/stable/c/0d4aef630be9d5f9c1227d07669c26c4383b5ad0
- https://git.kernel.org/stable/c/0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8
- https://git.kernel.org/stable/c/1ada20331f2df2a942d6b83ae1f04a304b642e2a
- https://git.kernel.org/stable/c/67176c96f325837b0bb3e9538ca2eba414f447d8
- https://git.kernel.org/stable/c/6755347c5f9bdd44dee80f692208b056fcd40a52
- https://git.kernel.org/stable/c/6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075
- https://git.kernel.org/stable/c/eda89a1bae0602aec8314ced299bb243b9f9aeef