CVE-2026-46198
Integer Overflow in Linux Kernel batman-adv Module
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an integer overflow in the Linux kernel component batman-adv, specifically in the function batadv_iv_ogm_send_to_if. The issue arises because a size check uses an int type, while the buff_pos variable uses a signed 16-bit integer (s16) type. This mismatch can cause an integer overflow, potentially leading to an out-of-bound read.
How can this vulnerability impact me? :
The integer overflow can cause an out-of-bound read in the Linux kernel's batman-adv module. This may lead to unexpected behavior such as crashes, data corruption, or potential security risks like information disclosure or privilege escalation, depending on how the out-of-bound read is exploited.