CVE Explorer

CVE-2026-63836

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd The cwnd is always MSS <= cwnd <= 0x20000000. But the calculation in batadv_tp_update_cwnd() assumes unsigned 32 bit arithmetics. ((mss * 8) ** 2) / (cwnd * 8) In case cwnd is actually 0x20000000, it will be shifted by 3 bit to the left end up at 0x100000000 or U32_MAX + 1. It will therefore wrap around and be 0 - resulting in: ((mss * 8) ** 2) / 0 This is of

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:7f77d7f54631072809b9e52e6dee25ed9efde23e9d419a0aee0f598d40a49a98

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/tp_meter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.8"},{"lessThan":"4.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.260","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.211","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.177","versionType":"semver"},{"lessT…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/tp_meter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"35264c4d46067d6312871488c810cef387f8c1f6","status":"affected","version":"33a3bb4a3345bb511f9c69c913da95d4693e2a4e","versionType":"git"},{"lessThan":"1381b021bf886b793fa5ffb895a8efae7ba0318f","status":"affected","version":"33a3bb4a3345bb511f9c69c913da95d4693e2a4e","versionType":"git"},{"lessThan":"d08b69da40a101df1e28bfe1e8fa7a09ffa41107","status":"affected","version":"33a3bb4a3345bb511f9c…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/1381b021bf886b793fa5ffb895a8efae7ba0318f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/33ccd52f3cc9ed46ce395199f89aa3234dc83314"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/35264c4d46067d6312871488c810cef387f8c1f6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/585616dab0aa9c45bc11b2c8082ca78533bc00e9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/7d2a44bc6bbe39aed03c68864aa0e54e04a50278"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/ac229c86e49fdb96d91f51bc2fa37a9c4f58c44f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/cd74176cf1685f35a2e5f212d15748bbfecb53b6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/d08b69da40a101df1e28bfe1e8fa7a09ffa41107"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c2b69ee837a0321ab8fdc32064246a442dc11ffb6e41dcc4e63c9f105605da39 · sha256:da7f2d494c314c35… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer