CVE-2026-31683: batman-adv: avoid OGM aggregation when skb tailroom is insufficient
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: avoid OGM aggregation when skb tailroom is insufficient
When OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated with only packetlen bytes, while a later packet can still be selected for aggregation. Appending in this case can hit skbput overflow conditions.
Reject aggregation when the target skb tailroom cannot accommodate the new packet. The caller then falls back to creating a new forward packet instead of appending.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31683?
CVE-2026-31683 is classified as a medium severity vulnerability.
How do I fix CVE-2026-31683?
To mitigate CVE-2026-31683, ensure that you have updated to the latest version of the Linux kernel that addresses this issue.
What type of vulnerability is CVE-2026-31683?
CVE-2026-31683 is a vulnerability related to the batman-adv networking protocol within the Linux kernel.
Who is affected by CVE-2026-31683?
CVE-2026-31683 primarily affects systems using the batman-adv protocol in their Linux kernel implementation.
What are the potential impacts of CVE-2026-31683?
The potential impact of CVE-2026-31683 includes the risk of network instability or data loss due to improper packet handling.