CVE-2026-63836

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

CVE-2026-63836 batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

CVE-2026-63836

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

CVE-2026-63835

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

CVE-2026-63834

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...

CVE-2026-63835

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

EUVD-2026-45500

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...

CVE-2026-63835

CVE-2026-63835 concerns the Linux kernel’s batman-adv OGM aggregation on disabled hard interfaces. When an interface is disabled, batadv_hardif_disable_interface() disables the worker and frees the skb aggr_list; however batadv_v_ogm_send_meshif() may still queue new skbs via batadv_v_ogm_queue_o...

CVE-2026-63835 batman-adv: v: prevent OGM aggregation on disabled hardif

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

EUVD-2026-45501

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

CVE-2026-63834 batman-adv: tp_meter: restrict number of unacked list entries

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...

CVE-2026-63834

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...

CVE-2026-63834

The CVE concerns the Linux kernel’s batman-adv tp_meter: unacked_list can be pressured to grow (via crafted small messages, seqno gaps) if the list is unbounded. The result is potential out-of-memory or high CPU usage from scanning a large unacked_list. If a limit is applied, the implementation m...

CVE-2026-63834 batman-adv: tp_meter: restrict number of unacked list entries

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...

PT-2026-61410

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module within the tp meter component. The batadv tp sender cleanup function previously used a combination of timer delete sync and timer delete to preve...

PT-2026-61406

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the last changeset len field in batadv piv tt is declared as a signed 16-bit integer s16. Because this field should not hold negative value...

Linux Distros Unpatched Vulnerability : CVE-2026-63836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32...

PT-2026-61150

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the unacked list is unbound. An attacker can send messages with small lengths and specific seqno values and gaps to force the receiver to...

PT-2026-61152

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero error exists in the batman-adv module within the batadv tp update cwnd function. The issue occurs during the calculation of dec cwnd when the cwnd variable reaches the...

PT-2026-61409

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the batman-adv tp meter component during receiver shutdown. The receiver shutdown timer handler, batadv tp receiver shutdown, is responsible for releasing the ...