Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

CVE

CVE-2026-52914

batman-adv: fix fragment reassembly length accounting
Back to all
CVE

CVE-2026-52914

batman-adv: fix fragment reassembly length accounting

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: fix fragment reassembly length accounting

batman-adv keeps a running payload length for queued fragments and uses it

to validate a fragment chain before reassembly.

That accounting currently allows the accumulated fragment length to be

truncated during updates. As a result, malformed fragment chains can

bypass the intended validation and drive reassembly with inconsistent

length state, leading to a local denial of service.

Fix the accounting by storing the accumulated length in a length-typed

field and rejecting update overflows before the existing validation logic

runs.

The fix was verified against the original reproducer and against valid

fragment reassembly paths.

Package Versions Affected

Package Version
patch Availability
No items found.

Automatically patch vulnerabilities without upgrading

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

CVSS Version

Severity
Base Score
CVSS Version
Score Vector
C
H
U
9.8
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
0
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
-

Related Resources

No items found.

References

https://git.kernel.org/stable/c/37be61825b15534a16ff9cfc9546de155b6df982, https://git.kernel.org/stable/c/3eb8bcb823391bd58997831b3c9c152a4ba8e255, https://git.kernel.org/stable/c/975563c5de1123dde1ec7946bf5556d20c89d74e, https://git.kernel.org/stable/c/9cd3f16c320bfdadd4509358122368deb56a5741, https://git.kernel.org/stable/c/e4f3f6b818aa6a678bc54a2d4e0bece2303c6a64, https://git.kernel.org/stable/c/e910dbf509125fe51ad68e4fa74dc8ab0a8e787a, https://git.kernel.org/stable/c/f653b040dad1af70fa5cd4fe085e4758925480c9, https://git.kernel.org/stable/c/fdb2c96efb2baeb3725e9ce3ede8f1e36f5490f0, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52914.json, https://nvd.nist.gov/vuln/detail/CVE-2026-52914, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Severity

9.8

CVSS Score
0
10

Basic Information

Base CVSS
9.8
EPSS Probability
0.00519%
EPSS Percentile
0.4049%
Introduced Version
610bfc6bc99bc83680d190ebc69359a05fc7f605,3.13.0,5.11.0,5.16.0,6.2.0,6.7.0,6.13.0,6.19.0,0
Fix Available
9cd3f16c320bfdadd4509358122368deb56a5741,5.10.258,5.15.209,6.1.175,6.6.142,6.12.92,6.18.34,7.0.11,6.1.176-1,5.10.259-1,6.1.176-1~deb11u1,6.12.94-1

Fix Critical Vulnerabilities Instantly

Secure your app without upgrading.
Fix Without Upgrading