CVE-2026-52916

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the batman-adv module where the batadv frag skb buffer() function is called by batadv batman skb recv() upon receiving a BATADV UNICAST FRAG packet. After reassembling the fragments, batadv recv frag packet() calls batadv batman skb recv() again to process the payload. A malicious actor can send a BATADV UNICAST FRAG packet containing another BATADV UNICAST FRAG packet as its payload. This nesting causes unbounded recursion through batadv batman skb recv(), leading to kernel stack exhaustion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.