CVE-2026-63834

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the batman-adv module where the unacked list is unbound. An attacker can send messages with small lengths and specific seqno values and gaps to force the receiver to allocate an excessive number of unacked list entries. This can lead to an out-of-memory condition or significantly increase management overhead, wasting CPU cycles during list searches. The issue is further complicated if the list is limited but the system fails to drop the entry with the highest seqno when the limit is exceeded, potentially causing the process to stall as high seqno values are not handled by the batadv tp ack unordered() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.