Buffer Overflow Vulnerability in Linux Kernel Affecting batman-adv

CVE-2026-52934

What is CVE-2026-52934?

A vulnerability exists in the batman-adv module of the Linux kernel, where oversized TVLV packets can lead to buffer overflow. This issue arises during the construction of a TVLV packet section when the size exceeds the limits of an unsigned 16-bit integer, causing incorrect memory allocation. To rectify this, the return type of the size calculation function has been updated to size_t, and checks have been implemented to prevent processing of oversized packets. This mitigates the risk of memory corruption and enhances the overall stability of the kernel.

References