CVE-2026-64091

🗓️ 19 Jul 2026 15:40:00Reported by LinuxType

Fix TOCTOU race in batman-adv tt VLAN reporting by overestimating the initial buffer and filling non empty VLANs.

Reporter	Title	Published	Views	Family All 25
ATTACKERKB	CVE-2026-64091	19 Jul 202615:40	–	attackerkb
Circl	CVE-2026-64091	23 Jul 202611:58	–	circl
Cvelist	CVE-2026-64091 batman-adv: tt: fix TOCTOU race for reported vlans	19 Jul 202615:40	–	cvelist
Debian CVE	CVE-2026-64091	19 Jul 202615:40	–	debiancve
EUVD	EUVD-2026-45776	19 Jul 202615:40	–	euvd
NVD	CVE-2026-64091	19 Jul 202616:17	–	nvd
OSV	BELL-CVE-2026-64091	22 Jul 202606:06	–	osv
OSV	DEBIAN-CVE-2026-64091	19 Jul 202616:17	–	osv
OSV	ROOT-OS-UBUNTU-2204-CVE-2026-64091 CVE-2026-64091 in linux - Patched by Root	6 Aug 202607:51	–	osv
OSV	UBUNTU-CVE-2026-64091	20 Jul 202600:00	–	osv

Vulners

CNA

Node

linux linux_kernelRange3.16.60–3.17

linux linux_kernelRange4.4.217–4.5

linux linux_kernelRange4.9.217–4.10

linux linux_kernelRange4.14.174–4.15

linux linux_kernelRange4.17–5.10.259

linux linux_kernelRange5.11.0–5.15.210

linux linux_kernelRange5.16.0–6.1.176

linux linux_kernelRange6.2.0–6.6.143

linux linux_kernelRange6.7.0–6.12.93

linux linux_kernelRange6.13.0–6.18.34

linux linux_kernelRange6.19.0–7.0.11

linux linux_kernelRange7.1.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/batman-adv/translation-table.c"
    ],
    "versions": [
      {
        "version": "16116dac23396e73c01eeee97b102e4833a4b205",
        "lessThan": "e4236bf3ec8d6bb15d0d8d825dcf9933a7d6666b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "16116dac23396e73c01eeee97b102e4833a4b205",
        "lessThan": "724a8eb4155669797c96b70d70e354284ae3b5a8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "16116dac23396e73c01eeee97b102e4833a4b205",
        "lessThan": "211ea59988e1cba43cb0367ad65d379b56f9c3bd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "16116dac23396e73c01eeee97b102e4833a4b205",
        "lessThan": "65a1e67339aa8c95ac544b796946af388930ee23",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "16116dac23396e73c01eeee97b102e4833a4b205",
        "lessThan": "b4d4efd4e351593c81e9293d4b4408d244fa5ee7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "16116dac23396e73c01eeee97b102e4833a4b205",
        "lessThan": "4cc85aec8d3c9ab4dc716dc9f1ed36fca16b227f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "16116dac23396e73c01eeee97b102e4833a4b205",
        "lessThan": "9a9c859457bc440a55773e01ff18b1bb5bab6836",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "16116dac23396e73c01eeee97b102e4833a4b205",
        "lessThan": "94d27005016be15ffc638b2ecbc4d58805ad7b48",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3134c5a32810c510f1f447c135cec346acbb71c3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e861e03a1b5b615ad1b57b1802b17e260eedccfe",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0b81edc8818903c64c4d121bc51cd5825be8cc67",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "90ae6475b1753f0c1a4c66034b5666de3189fac8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3.16.60",
        "lessThan": "3.17",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "4.4.217",
        "lessThan": "4.5",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "4.9.217",
        "lessThan": "4.10",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "4.14.174",
        "lessThan": "4.15",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/batman-adv/translation-table.c"
    ],
    "versions": [
      {
        "version": "4.17",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.17",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.176",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.143",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.93",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.34",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.11",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/65a1e67339aa8c95ac544b796946af388930ee23
git	www.git.kernel.org/stable/c/b4d4efd4e351593c81e9293d4b4408d244fa5ee7
git	www.git.kernel.org/stable/c/e4236bf3ec8d6bb15d0d8d825dcf9933a7d6666b
git	www.git.kernel.org/stable/c/211ea59988e1cba43cb0367ad65d379b56f9c3bd
git	www.git.kernel.org/stable/c/9a9c859457bc440a55773e01ff18b1bb5bab6836
git	www.git.kernel.org/stable/c/94d27005016be15ffc638b2ecbc4d58805ad7b48
git	www.git.kernel.org/stable/c/724a8eb4155669797c96b70d70e354284ae3b5a8
git	www.git.kernel.org/stable/c/4cc85aec8d3c9ab4dc716dc9f1ed36fca16b227f

05 Aug 2026 12:39Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.19.8

EPSS0.00552