Packet Handling Issue in Linux Kernel's batman-adv Component

CVE-2026-31683

What is CVE-2026-31683?

The Linux kernel contains a vulnerability within the batman-adv component that can lead to packet handling issues during OGM aggregation. When the runtime state of OGM aggregation is toggled, existing forwarded packets may only have a limited amount of allocated space (determined by packet_len). This limitation can create conditions where a later packet is chosen for aggregation but cannot be safely appended due to insufficient skb tailroom. As a result, this may cause overflow scenarios with skb_put. The implemented fix rejects aggregation attempts when the target skb does not have adequate tailroom, necessitating the creation of new forward packets instead.

References