Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-31683— batman-adv: avoid OGM aggregation when skb tailroom is insufficient

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于batman-adv中OGM聚合时未检查尾部空间，可能导致skb_put溢出。

CVSS 7.8 · High EPSS 0.18% · P7

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux c6c8fea29769d998d94fcec9b9f14d4b52b349d3< 67176c96f325837b0bb3e9538ca2eba414f447d8 affected
c6c8fea29769d998d94fcec9b9f14d4b52b349d3< 0b10a8b355c3f71012ce89289ec2c2f5e3bfd6c1 affected
c6c8fea29769d998d94fcec9b9f14d4b52b349d3< 6755347c5f9bdd44dee80f692208b056fcd40a52 affected
c6c8fea29769d998d94fcec9b9f14d4b52b349d3< 1ada20331f2df2a942d6b83ae1f04a304b642e2a affected
c6c8fea29769d998d94fcec9b9f14d4b52b349d3< 6e40ebb999c2c3d2fbb3cacb61f0384ee6e69075 affected
c6c8fea29769d998d94fcec9b9f14d4b52b349d3< 0e35db29fc5a97a8553f7c2d3a2ba730e46b1ee8 affected
c6c8fea29769d998d94fcec9b9f14d4b52b349d3< eda89a1bae0602aec8314ced299bb243b9f9aeef affected
c6c8fea29769d998d94fcec9b9f14d4b52b349d3< 0d4aef630be9d5f9c1227d07669c26c4383b5ad0 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-31683

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
batman-adv: avoid OGM aggregation when skb tailroom is insufficient
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: avoid OGM aggregation when skb tailroom is insufficient When OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated with only packet_len bytes, while a later packet can still be selected for aggregation. Appending in this case can hit skb_put overflow conditions. Reject aggregation when the target skb tailroom cannot accommodate the new packet. The caller then falls back to creating a new forward packet instead of appending.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于batman-adv中OGM聚合时未检查尾部空间，可能导致skb_put溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux c6c8fea29769d998d94fcec9b9f14d4b52b349d3 ~ 67176c96f325837b0bb3e9538ca2eba414f447d8 -
Linux Linux 2.6.38 -

II. Public POCs for CVE-2026-31683

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-31683

请登录查看更多情报信息。

Same Patch Batch · Linux · 2026-04-25 · 13 CVEs total

CVE-2026-31685 9.4 CRITICAL netfilter: ip6t_eui64: reject invalid MAC header for all packets
CVE-2026-31682 9.1 CRITICAL bridge: br_nd_send: linearize skb before parsing ND options
CVE-2026-31680 7.8 HIGH net: ipv6: flowlabel: defer exclusive option free until RCU teardown
CVE-2026-31678 7.8 HIGH openvswitch: defer tunnel netdev_put to RCU release
CVE-2026-31675 7.8 HIGH net/sched: sch_netem: fix out-of-bounds access in packet corruption
CVE-2026-31673 7.8 HIGH af_unix: read UNIX_DIAG_VFS data under unix_state_lock
CVE-2026-31676 7.5 HIGH rxrpc: only handle RESPONSE during service challenge
CVE-2026-31679 7.1 HIGH openvswitch: validate MPLS set/set_masked payload length
CVE-2026-31674 7.1 HIGH netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
CVE-2026-31684 net: sched: act_csum: validate nested VLAN headers
CVE-2026-31681 netfilter: xt_multiport: validate range encoding in checkentry
CVE-2026-31677 crypto: af_alg - limit RX SG extraction by receive buffer budget

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-31683

No comments yet

Leave a comment