PT-2026-44321 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46198

Mitre

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: fix integer overflow on buff pos

Fixing an integer overflow present in batadv iv ogm send to if. The size check is done using the int type in batadv iv ogm aggr packet whereas the buff pos variable uses the s16 type. This could lead to an out-of-bound read.

Related Identifiers

CVE-2026-46198

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46198 · Security Note
• https://git.kernel.org/stable/c/974542d1efc48b7e9fe16184e647615cba39969b · Note
• https://git.kernel.org/stable/c/b252797bfced986d6d92ec2f4cfcca842ce8aa78 · Note
• https://git.kernel.org/stable/c/0799e5943611006b346b8813c7daf7dd5aa26bfd · Note
• https://git.kernel.org/stable/c/bf872db54f91ffe70104b98c20068b2d5910e018 · Note
• https://git.kernel.org/stable/c/f61499359fa529f0d45a53bf7c573a49eb6322e6 · Note