Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64089

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len batadv_piv_tt::last_changeset_len len was declared as s16, but the field is never intended to hold a negative value. When a value greater than 32767 is assigned, it wraps to a negative signed integer. In batadv_send_my_tt_response(), last_changeset_len is temporarily widened to s32. The incorrectly negative s16 value propagates into the s32, causing batadv_tt_prepare_tvlv_local_
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:7e1584e6cd3c9e39d21326ac5b0c883f9dd2550313d4701046f07ea3ee9e150a
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/types.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6314089acf0ddf64376fdc0b1420695504c73f52","status":"affected","version":"a73105b8d4c765d9ebfb664d0a66802127d8e4c7","versionType":"git"},{"lessThan":"55dc41fe8821e9a849e147255ad572bc933a9d15","status":"affected","version":"a73105b8d4c765d9ebfb664d0a66802127d8e4c7","versionType":"git"},{"lessThan":"c424e8519ac78eac5d9f4eecf06208a0d619ec14","status":"affected","version":"a73105b8d4c765d9ebfb664…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/types.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.1"},{"lessThan":"3.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/types.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6314089acf0ddf64376fdc0b1420695504c73f52","status":"affected","version":"a73105b8d4c765d9ebfb664d0a66802127d8e4c7","versionType":"git"},{"lessThan":"55dc41fe8821e9a849e147255ad572bc933a9d15","status":"affected","version":"a73105b8d4c765d9ebfb664d0a66802127d8e4c7","versionType":"git"},{"lessThan":"c424e8519ac78eac5d9f4eecf06208a0d619ec14","status":"affected","version":"a73105b8d4c765d9ebfb664…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/types.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.1"},{"lessThan":"3.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/179eb62506a02d00370bd6478898cb632e10986c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/22d59c72f4a47ffec121d0610f70d0d70c3c11c8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/55dc41fe8821e9a849e147255ad572bc933a9d15"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/6314089acf0ddf64376fdc0b1420695504c73f52"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/c424e8519ac78eac5d9f4eecf06208a0d619ec14"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/d29abf70c665730e249d2ec8e1402095ae26bcee"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/eb235472b52ef36981c5aad330485eaf2382c53b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/fc92cdfcb295cefa4344d71a527d61b638b7bfc4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:86c7970e044754060ca75afa7871961222b21e5ec29db32a8667ba9e97ee2e53 · sha256:03c9e30bbef0493c… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer