CVE-2026-46198 Details
Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix integer overflow on buff_pos Fixing an integer overflow present in batadv_iv_ogm_send_to_if. The size check is done using the int type in batadv_iv_ogm_aggr_packet whereas the buff_pos variable uses the s16 type. This could lead to an out-of-bound read.
An integer overflow vulnerability has been identified in the Linux kernel's batman-adv networking component, specifically within the OGM (Optimized Link State Routing) packet handling. The issue arises because the size check in the 'batadv_iv_ogm_aggr_packet' function uses the 'int' type, while the 'buff_pos' variable is defined as 's16'. This mismatch can lead to an out-of-bounds read, potentially allowing for memory corruption or unauthorized data access.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. Instructions for downloading the updated kernel can be found on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0799e5943611006b346b8813c7daf7dd5aa26bfd | kernel.org | Patch |
| https://git.kernel.org/stable/c/10bb1f366d884d506c38a947b43026a75d1afe9a | kernel.org | Patch |
| https://git.kernel.org/stable/c/867cd090760e8f5cd206f387b47ff9c56fac04e9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/96c9c0ed9a9579a9085765aceaa4556a6666eb82 | kernel.org | Patch |
| https://git.kernel.org/stable/c/974542d1efc48b7e9fe16184e647615cba39969b | kernel.org | Patch |
| https://git.kernel.org/stable/c/b252797bfced986d6d92ec2f4cfcca842ce8aa78 | kernel.org | Patch |
| https://git.kernel.org/stable/c/bf872db54f91ffe70104b98c20068b2d5910e018 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f61499359fa529f0d45a53bf7c573a49eb6322e6 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.38, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.140 >= 6.7, < 6.12.90 >= 6.13, < 6.18.32 >= 6.19, < 7.0.9 7.1 rc1 7.1 rc2 7.1 rc3 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 10, 2026 | Initial Analysis | [email protected] |
| Jun 1, 2026 | CVE Modified | kernel.org |
| May 30, 2026 | CVE Modified | kernel.org |
| May 28, 2026 | New CVE Received | kernel.org |