CVE-2026-31683
Description
A flaw was found in the batman-adv module of the Linux kernel. This vulnerability arises when the Optimized Global Messaging (OGM) aggregation state is dynamically altered, leading to insufficient buffer space (skb tailroom) for network packets. A remote attacker could exploit this condition by sending specially crafted network packets, potentially causing a memory corruption vulnerability that results in a system crash or denial of service. The system may become unstable or unresponsive.
Understanding the Weakness (CWE)
Integrity,Availability,Confidentiality
Technical Impact: DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands; Read Memory; Modify Memory
If the incorrect calculation is used in the context of memory allocation, then the software may create a buffer that is smaller or larger than expected. If the allocated buffer is smaller than expected, this could lead to an out-of-bounds read or write (CWE-119), possibly causing a crash, allowing arbitrary code execution, or exposing sensitive data.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
