VDB

CVE-2026-31683

CVE-2026-31683 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: batman-adv: avoid OGM aggregation when skb tailroom is insufficient When OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated with only packet_len bytes, while a later packet can still be selected for aggregation. Appending in this case can hit skb_put overflow conditions. Reject aggregation when the target skb tailroom cannot accommodate the new packet. The caller then falls back to creating a new forward packet instead of appending.

EPSS 0.02% · 3.6th percentile

Risk Scores

EPSS Score
0.02%
3.6th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel2.6.38, 2.6.38, 2.6.38
LinuxLinuxc6c8fea29769d998d94fcec9b9f14d4b52b349d3, c6c8fea29769d998d94fcec9b9f14d4b52b349d3, c6c8fea29769d998d94fcec9b9f14d4b52b349d3

Timeline

  • Apr 25, 2026 CVE Published
  • May 6, 2026 CVE Updated
  • May 18, 2026 EPSS Score
  • May 19, 2026 EPSS Score
  • May 20, 2026 EPSS Score
  • May 21, 2026 EPSS Score
  • May 22, 2026 EPSS Score
  • May 23, 2026 EPSS Score
  • May 24, 2026 EPSS Score
  • May 25, 2026 EPSS Score
  • May 26, 2026 EPSS Score
  • May 27, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›