CVE-2026-31683 Details
Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: avoid OGM aggregation when skb tailroom is insufficient When OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated with only packet_len bytes, while a later packet can still be selected for aggregation. Appending in this case can hit skb_put overflow conditions. Reject aggregation when the target skb tailroom cannot accommodate the new packet. The caller then falls back to creating a new forward packet instead of appending.
A vulnerability in the Linux kernel's batman-adv networking component has been addressed. The issue arose during the aggregation of OGM (Originator Message) packets, where the tailroom of a socket buffer (skb) was insufficient to accommodate new data. This could lead to an overflow condition. The vulnerability was introduced when the OGM aggregation state was changed at runtime, allowing packets to be incorrectly aggregated despite inadequate buffer space. The kernel now rejects such aggregation and creates a new forward packet instead, preventing the overflow issue.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux Kernel Archives.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/0d4aef630be9d5f9c1227d07669c26c4383b5ad0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/1ada20331f2df2a942d6b83ae1f04a304b642e2a | kernel.org | Patch |
| https://git.kernel.org/stable/c/67176c96f325837b0bb3e9538ca2eba414f447d8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/6755347c5f9bdd44dee80f692208b056fcd40a52 | kernel.org | Patch |
| https://git.kernel.org/stable/c/6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075 | kernel.org | Patch |
| https://git.kernel.org/stable/c/eda89a1bae0602aec8314ced299bb243b9f9aeef | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.38, < 5.10.253 >= 5.11, < 5.15.203 >= 5.16, < 6.1.167 >= 6.2, < 6.6.130 >= 6.7, < 6.12.78 >= 6.13, < 6.18.20 >= 6.19, < 6.19.10 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 6, 2026 | Initial Analysis | [email protected] |
| Apr 27, 2026 | CVE Modified | kernel.org |
| Apr 25, 2026 | New CVE Received | kernel.org |