Linux Kernel Vulnerability in Batman-adv Component

CVE-2026-63834

What is CVE-2026-63834?

A vulnerability in the Linux kernel's batman-adv component allows attackers to exploit unacked_list behaviors by sending specially crafted messages. This can induce excessive memory allocation for unacked_list entries, potentially leading to resource exhaustion or increased CPU overhead as the system struggles to manage an expanding list. To mitigate this risk, it is crucial to implement strict limits on the list's size while ensuring that the management process can continue unimpeded by dropping the least significant entries when necessary.

References