CVE-2026-64091

CVE-2026-64091 affects batman-adv in the Linux kernel, addressing a TOCTOU race in the TT-based TVLV generation for reported VLANs. The issue arises because the buffer used to hold VLAN entries is sized based on a prefilter that may undercount or overcount VLANs during parallel updates, while the...

PT-2026-61408

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. A new buffer with the correct size for the VLANs is then allocated...