CVE-2025-39839

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The batadv nc skb decode packet() function in the batman-adv module does not properly validate the coded len variable, potentially leading to out-of-bounds read and write issues during network-coding decode operations. The function trusts coded len and only checks it against skb->len, without verifying the source skb length. This can occur when XOR operations start at sizeof(struct batadv unicast packet), reducing payload headroom.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.