SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64090

MEDIUM · CVSS 5.5 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's batman-adv module, specifically in its handling of Transparent Transport (TT) responses, which could lead to inconsistent VLAN responses when nodes communicate indirectly. This inconsistency may result in network disruptions or degraded performance in mesh networks utilizing batman-adv. Network administrators and organizations relying on Linux-based mesh networking solutions should prioritize addressing this issue to ensure stable and reliable network operations.

CVE
CVE-2026-64090
Severity
MEDIUM
CVSS
5.5
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 ("batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs") added checks to the local (direct) TT response code. But the response can also be done indirectly by another node using the global TT state. To avoid such inconsistency states reported in the original fix, also avoid sending empty VLANs for replies from the global TT state.

Related CVEs

Other vulnerabilities affecting the same vendor(s)