AZL-89000
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89000.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-89000
- Upstream
- Published
- 2026-05-28T10:16:35Z
- Modified
- 2026-08-28T17:46:38.902814079Z
- Summary
- CVE-2026-46198 affecting package kernel for versions less than 6.6.141.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: fix integer overflow on buff_pos
Fixing an integer overflow present in batadvivogmsendtoif. The size check is done using the int type in batadvivogmaggrpacket whereas the buffpos variable uses the s16 type. This could lead to an out-of-bound read.
- References