CVE-2026-31683

HighCVSS 7.8/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: avoid OGM aggregation when skb tailroom is insufficient

When OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated with only packet_len bytes, while a later packet can still be selected for aggregation. Appending in this case can hit skb_put overflow conditions.

Reject aggregation when the target skb tailroom cannot accommodate the new packet. The caller then falls back to creating a new forward packet instead of appending.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= c6c8fea29769d998d94fcec9b9f14d4b52b349d3, < 67176c96f325837b0bb3e9538ca2eba414f447d8; >= c6c8fea29769d998d94fcec9b9f14d4b52b349d3, < 0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1; >= c6c8fea29769d998d94fcec9b9f14d4b52b349d3, < 6755347c5f9bdd44dee80f692208b056fcd40a52; >= c6c8fea29769d998d94fcec9b9f14d4b52b349d3, < 1ada20331f2df2a942d6b83ae1f04a304b642e2a; >= c6c8fea29769d998d94fcec9b9f14d4b52b349d3, < 6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075; >= c6c8fea29769d998d94fcec9b9f14d4b52b349d3, < 0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8; >= c6c8fea29769d998d94fcec9b9f14d4b52b349d3, < eda89a1bae0602aec8314ced299bb243b9f9aeef; >= c6c8fea29769d998d94fcec9b9f14d4b52b349d3, < 0d4aef630be9d5f9c1227d07669c26c4383b5ad0
LinuxLinux2.6.38

References

Timeline

Published
Apr 25, 2026
Last modified
Nov 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-316845.5In the Linux kernel, the following vulnerability has been resolved: net: sched: act_csum: validate nested VLAN headers tcf_csum_act() walkCVE-2026-316859.4In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui6CVE-2026-316867.8In the Linux kernel, the following vulnerability has been resolved: mm/kasan: fix double free for kasan pXds kasan_free_pxd() assumes the CVE-2026-316875.5In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe() Commit 11a78b794496 ("ARCVE-2026-316895.5In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edac_mc_alloc() When the mci->pvt_CVE-2026-31698.8A security vulnerability has been detected in Tenda F453 1.0.0.3. This impacts the function fromSafeEmailFilter of the file /goform/SafeEmaiCVE-2026-316907.8In the Linux kernel, the following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standard endian macros AdCVE-2026-316915.5In the Linux kernel, the following vulnerability has been resolved: igb: remove napi_synchronize() in igb_down() When an AF_XDP zero-copy CVE-2026-316925.5In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_CVE-2026-316937.8In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the CVE-2026-316947.8In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache(CVE-2026-316957.8In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Current
CVE-2026-31683: High severity, CVSS 7.8 | Vulnix