CVE-2026-31659: batman-adv: reject oversized global TT response buffers
batman-adv: reject oversized global TT response buffers
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (batman-adv)to a version that resolves this vulnerability.Patch batman-adv: reject oversized global TT response buffers - Configuration
In batman-adv, reject global TT response buffers where the TVLV value length cannot fit (i.e., prevent the full-table response path from using the original TT payload length that can cause batadv_tt_prepare_tvlv_global_data() to build an allocation length that results in a heap write past the end).
Linux kernel (batman-adv) Reject oversized global TT response buffers (before full-table response path uses TT payload length) = enabled
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31659?
CVE-2026-31659 has a medium severity rating due to the potential impact on network communication stability.
How do I fix CVE-2026-31659?
To fix CVE-2026-31659, update the Linux kernel to a version that includes the patch addressing this vulnerability.
Which Linux kernel versions are affected by CVE-2026-31659?
CVE-2026-31659 affects multiple Linux kernel versions from 3.13.1 to 7.0-rc7, including various releases in between.
Can CVE-2026-31659 be exploited remotely?
Yes, CVE-2026-31659 can be exploited remotely if the vulnerable service is accessible over a network.
What is batman-adv in relation to CVE-2026-31659?
Batman-adv is a networking protocol used in the Linux kernel that is affected by CVE-2026-31659 regarding oversized global TT response buffers.