CVE-2025-39839 batman-adv: fix OOB read/write in network-coding decode

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadvncskbdecodepacket trusts codedlen and checks only against skb-len. XOR starts at sizeofstruct batadvunicastpacket, reducing payload headroom, and the source skb length...

PT-2025-38546

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The batadv nc skb decode packet function in the batman-adv module does not properly validate the coded len variable, potentially leading to out-of-bounds read and write issues during...