PT-2026-35143 · Linux · Linux

Published 2026-04-25 · Updated 2026-04-25 · CVE-2026-31683

NVD

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: avoid OGM aggregation when skb tailroom is insufficient

When OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated with only packet len bytes, while a later packet can still be selected for aggregation. Appending in this case can hit skb put overflow conditions.

Reject aggregation when the target skb tailroom cannot accommodate the new packet. The caller then falls back to creating a new forward packet instead of appending.

Related Identifiers

CVE-2026-31683

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-31683 · Security Note
• https://git.kernel.org/stable/c/0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8 · Note
• https://git.kernel.org/stable/c/1ada20331f2df2a942d6b83ae1f04a304b642e2a · Note
• https://git.kernel.org/stable/c/6755347c5f9bdd44dee80f692208b056fcd40a52 · Note
• https://git.kernel.org/stable/c/0d4aef630be9d5f9c1227d07669c26c4383b5ad0 · Note
• https://git.kernel.org/stable/c/eda89a1bae0602aec8314ced299bb243b9f9aeef · Note
• https://git.kernel.org/stable/c/0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1 · Note
• https://git.kernel.org/stable/c/6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075 · Note
• https://git.kernel.org/stable/c/67176c96f325837b0bb3e9538ca2eba414f447d8 · Note