CVE-2026-52916: batman-adv: frag: disallow unicast fragment in fragment
batman-adv: frag: disallow unicast fragment in fragment
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Compensating control
In batman-adv fragment reassembly, discard packets that are still BATADV_UNICAST_FRAG packets after defragmentation to prevent recursive processing of nested fragments.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52916?
CVE-2026-52916 has a risk rating of 71, indicating a high severity level.
How do I fix CVE-2026-52916?
To fix CVE-2026-52916, update to the latest version of the Linux kernel that includes the relevant security patches.
What systems are affected by CVE-2026-52916?
CVE-2026-52916 affects systems running the Linux kernel with the batman-adv module.
What impact does CVE-2026-52916 have on system security?
CVE-2026-52916 could potentially allow attackers to exploit unicast fragments, compromising the integrity of data transmission.
When was CVE-2026-52916 published?
CVE-2026-52916 was published on June 24, 2026.