In the Linux kernel, the following vulnerability has been resolved:

batman-adv: fix integer overflow on buff_pos

Fixing an integer overflow present in batadv_iv_ogm_send_to_if. The size
check is done using the int type in batadv_iv_ogm_aggr_packet whereas the
buff_pos variable uses the s16 type. This could lead to an out-of-bound
read.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
c6c8fea29769d998d94fcec9b9f14d4b52b349d3 affected < f61499359fa529f0d45a53bf7c573a49eb6322e6
c6c8fea29769d998d94fcec9b9f14d4b52b349d3 affected < 974542d1efc48b7e9fe16184e647615cba39969b
c6c8fea29769d998d94fcec9b9f14d4b52b349d3 affected < bf872db54f91ffe70104b98c20068b2d5910e018
c6c8fea29769d998d94fcec9b9f14d4b52b349d3 affected < b252797bfced986d6d92ec2f4cfcca842ce8aa78
c6c8fea29769d998d94fcec9b9f14d4b52b349d3 affected < 0799e5943611006b346b8813c7daf7dd5aa26bfd
Linux Linux affected
Version Status Constraints
2.6.38 affected —
0 unaffected < 2.6.38
6.6.140 unaffected ≤ 6.6.*
6.12.90 unaffected ≤ 6.12.*
6.18.32 unaffected ≤ 6.18.*
7.0.9 unaffected ≤ 7.0.*
7.1-rc4 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0799e5943611006b346b8813c7daf7dd5aa26bfd cve-icon cve-icon
https://git.kernel.org/stable/c/974542d1efc48b7e9fe16184e647615cba39969b cve-icon cve-icon
https://git.kernel.org/stable/c/b252797bfced986d6d92ec2f4cfcca842ce8aa78 cve-icon cve-icon
https://git.kernel.org/stable/c/bf872db54f91ffe70104b98c20068b2d5910e018 cve-icon cve-icon
https://git.kernel.org/stable/c/f61499359fa529f0d45a53bf7c573a49eb6322e6 cve-icon cve-icon
History

Thu, 28 May 2026 13:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
CWE-680

Thu, 28 May 2026 10:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix integer overflow on buff_pos Fixing an integer overflow present in batadv_iv_ogm_send_to_if. The size check is done using the int type in batadv_iv_ogm_aggr_packet whereas the buff_pos variable uses the s16 type. This could lead to an out-of-bound read.
Title batman-adv: fix integer overflow on buff_pos
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-28T09:40:14.558Z

Reserved: 2026-05-13T15:03:33.104Z

Link: CVE-2026-46198

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-28T10:16:35.460

Modified: 2026-05-28T13:44:01.663

Link: CVE-2026-46198

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-28T12:45:06Z

Weaknesses

No weakness.