CVE-2026-64091

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the batman-adv module. This occurs when generating the local TT based TVLV, where the system first calculates the number of VLANs with at least one TT entry to allocate a buffer. Because the number of VLANs requiring storage can increase between the pre-allocation check and the actual filling of the buffer, the allocated space may become insufficient, potentially leading to memory corruption. A TOCTOU race is a software bug where a program checks the state of a resource before using it, but the state changes between the check and the use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.