PT-2026-61150 · Linux · Linux Kernel

CVE-2026-63834 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A denial of service issue exists in the batman-adv module. An attacker can send messages with small lengths and specific sequence numbers and gaps to force the receiver to allocate an excessive number of entries in the unacked list. This can lead to an out-of-memory condition or high CPU consumption due to the overhead of searching through a large list.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-63834

Affected Products

Linux Kernel

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-63834 · Security Note
• https://git.kernel.org/stable/c/1c616b0be4bd8399d485e25e91859373b95d6013 · Note
• https://git.kernel.org/stable/c/1fb8762600a393d1caccd63be5d07e1756982d68 · Note
• https://git.kernel.org/stable/c/e7c775110e1858e5a7471a23a9c9658c0af9df89 · Note
• https://git.kernel.org/stable/c/c6231d628d06d841bc1617b2f7034f5f39876b16 · Note
• https://git.kernel.org/stable/c/1111a3381bca2d1f084a07686bc783af5ab23df7 · Note
• https://twitter.com/VulmonFeeds/status/2078845929684148407 · Twitter Post
• https://git.kernel.org/stable/c/2233787658db859f0a9b83cb397cf783bb8be865 · Note
• https://git.kernel.org/stable/c/f8c499fd275e59203b77fca76ae6ef2d096c2133 · Note
• https://git.kernel.org/stable/c/31a88792bfba142be3c9521538c1db805677381f · Note