EUVD-2026-59125

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. This number is an u16 and gets multiplied by the size of the struct batadvtvlvttvlandata 8 bytes. The size can therefore...

CVE-2026-72226

CVE-2026-72226 affects the Linux kernel’s batman-adv TT (broadcast) implementation. A TT unicast TVLV stored the VLAN count as a 16-bit value (u16) and multiplied it by 8 bytes for batadv_tvlv_tt_vlan_data, which could overflow tt_vlan_len and invalidate safety checks against the TVLV buffer. The...