CVE-2026-52934

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the batman-adv module where the batadv tvlv container list size() function uses a u16 return type and accumulator. When the accumulated size of registered containers exceeds U16 MAX, an integer wrap-around occurs. This leads to an undersized memory allocation in the batadv tvlv container ogm append() function. Consequently, a subsequent memory copy operation writes beyond the allocated buffer, resulting in kernel memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.