Integer Overflow Vulnerability in the Linux Kernel Affecting Batman-adv Module

CVE-2026-46198

What is CVE-2026-46198?

An integer overflow vulnerability has been found in the batman-adv module of the Linux kernel. Specifically, this issue arises in the 'batadv_iv_ogm_send_to_if' function, due to a size check utilizing the int type while the 'buff_pos' variable employs the s16 type. This inconsistency could potentially allow an attacker to perform out-of-bounds read operations, potentially leading to unauthorized information disclosure or other related security concerns.

References