CVE-2026-72226

CVE-2026-72226 concerns the Linux kernel’s batman-adv TT TVLV handling. A unicast TVLV contains the number of VLANs (u16) and multiplies it by 8 (batadv_tvlv_tt_vlan_data). This can overflow the 16-bit tt_vlan_len, invalidating safety checks for out-of-bounds access. The published fix switches to...

EUVD-2026-59125

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. This number is an u16 and gets multiplied by the size of the struct batadvtvlvttvlandata 8 bytes. The size can therefore...