CVE-2026-80839

CVE-2026-80839 affects the batman-adv module in the Linux kernel . The root cause is that batadv_tvlv_call_handler() sets the 16-bit network and transport header offsets from a received multicast TVLV without validating whether the TVLV end offset is representable. When it exceeds the field's ran...