Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix integer overflow on buff_pos Fixing an integer overflow present in batadv_iv_ogm_send_to_if. The size check is done using the int type in batadv_iv_ogm_aggr_packet whereas the buff_pos variable uses the s16 type. This could lead to an out-of-bound read.
References (8)
Core 8
Core References
Scores
CVSS v3
8.8
EPSS
0.0028
EPSS Percentile
20.4%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-190
Status
published
Products (28)
linux/Kernel
2.6.38 - 5.10.258linux
linux/Kernel
5.11.0 - 5.15.209linux
linux/Kernel
5.16.0 - 6.1.175linux
linux/Kernel
6.13.0 - 6.18.32linux
linux/Kernel
6.19.0 - 7.0.9linux
linux/Kernel
6.2.0 - 6.6.140linux
linux/Kernel
6.7.0 - 6.12.90linux
Linux/Linux
< 2.6.38
Linux/Linux
2.6.38
Linux/Linux
5.10.258 - 5.10.*
... and 18 more
Published
May 28, 2026
Tracked Since
May 28, 2026