Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64088

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative tt_buff_len batadv_orig_node::tt_buff_len was declared as s16, but the field is never intended to hold a negative value. When a value greater than 32767 is assigned, it wraps to a negative signed integer. In batadv_send_other_tt_response(), tt_buff_len is temporarily widened to s32. The incorrectly negative s16 value propagates into the s32, causing batadv_tt_prepare_tvlv_global_data() to allocate
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ffac83bae94d7b94e2109e4bf9ec875530ad24a07381198f3e7a2c55bed31bb8
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/types.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4c4c2f340f4c27373bfcac8dc5032ce7bb474e47","status":"affected","version":"a73105b8d4c765d9ebfb664d0a66802127d8e4c7","versionType":"git"},{"lessThan":"33e5ede7ce6d92e531920d4bbd6d3e18ef1c6430","status":"affected","version":"a73105b8d4c765d9ebfb664d0a66802127d8e4c7","versionType":"git"},{"lessThan":"3c96dff00998314983b68a3e7caac07a66ebe496","status":"affected","version":"a73105b8d4c765d9ebfb664…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/types.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.1"},{"lessThan":"3.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/types.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4c4c2f340f4c27373bfcac8dc5032ce7bb474e47","status":"affected","version":"a73105b8d4c765d9ebfb664d0a66802127d8e4c7","versionType":"git"},{"lessThan":"33e5ede7ce6d92e531920d4bbd6d3e18ef1c6430","status":"affected","version":"a73105b8d4c765d9ebfb664d0a66802127d8e4c7","versionType":"git"},{"lessThan":"3c96dff00998314983b68a3e7caac07a66ebe496","status":"affected","version":"a73105b8d4c765d9ebfb664…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/types.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.1"},{"lessThan":"3.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/32edd2a28e112064020a2f319a8cb8a9e5a09767"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/33e5ede7ce6d92e531920d4bbd6d3e18ef1c6430"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/3c96dff00998314983b68a3e7caac07a66ebe496"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/4c4c2f340f4c27373bfcac8dc5032ce7bb474e47"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/4dab98961426d0cf6a1599cda6950b7596ca2fcd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/730de8733dd90f70d7580a9b329b971f8e1474a2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b64963a2ceeb7529310b6cf253a1e540784422f4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/ed28ead3420c373a7928622f114bc6168075d1e1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57a84bb2ffcb40842488e342256b1f1b1fb5ea0fc1c5820139fa058374e9a48f · sha256:abd13a73fcf0f843… · /containers/cna/references/6

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer