{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64090", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.032Z", "datePublished": "2026-07-19T15:39:59.392Z", "dateUpdated": "2026-07-19T15:39:59.392Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-19T15:39:59.392Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tt: avoid empty VLAN responses\n\nThe commit 16116dac2339 (\"batman-adv: prevent TT request storms by not\nsending inconsistent TT TLVLs\") added checks to the local (direct) TT\nresponse code. But the response can also be done indirectly by another node\nusing the global TT state. To avoid such inconsistency states reported in\nthe original fix, also avoid sending empty VLANs for replies from the\nglobal TT state."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/batman-adv/translation-table.c"], "versions": [{"version": "7ea7b4a142758deaf46c1af0ca9ceca6dd55138b", "lessThan": "1f467d9a095211d3f77e8ff1bee90e73ffe01c64", "status": "affected", "versionType": "git"}, {"version": "7ea7b4a142758deaf46c1af0ca9ceca6dd55138b", "lessThan": "9a02c8fc963ddeecb5d8788be0740c1869fc54b7", "status": "affected", "versionType": "git"}, {"version": "7ea7b4a142758deaf46c1af0ca9ceca6dd55138b", "lessThan": "ea4f757641430bcc8322772e161453c4db5ecb64", "status": "affected", "versionType": "git"}, {"version": "7ea7b4a142758deaf46c1af0ca9ceca6dd55138b", "lessThan": "99f17d1cdb371cbd037975239b321f346d38f6d2", "status": "affected", "versionType": "git"}, {"version": "7ea7b4a142758deaf46c1af0ca9ceca6dd55138b", "lessThan": "cfb30645280a2131e46cbd1b9a38cfd3ff893f12", "status": "affected", "versionType": "git"}, {"version": "7ea7b4a142758deaf46c1af0ca9ceca6dd55138b", "lessThan": "b93ca6012712ecab2b551e120d7c95038d6a89e5", "status": "affected", "versionType": "git"}, {"version": "7ea7b4a142758deaf46c1af0ca9ceca6dd55138b", "lessThan": "ab26e346322648f5c39de017d9723c9256284fce", "status": "affected", "versionType": "git"}, {"version": "7ea7b4a142758deaf46c1af0ca9ceca6dd55138b", "lessThan": "fa1bd704940b5bcbc32c0b28db9167405c8ee5e0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/batman-adv/translation-table.c"], "versions": [{"version": "3.13", "status": "affected"}, {"version": "0", "lessThan": "3.13", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.259", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.210", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.176", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.143", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.93", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.34", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.11", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "5.10.259"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "5.15.210"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "6.1.176"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "6.6.143"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "6.12.93"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "6.18.34"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "7.0.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/1f467d9a095211d3f77e8ff1bee90e73ffe01c64"}, {"url": "https://git.kernel.org/stable/c/9a02c8fc963ddeecb5d8788be0740c1869fc54b7"}, {"url": "https://git.kernel.org/stable/c/ea4f757641430bcc8322772e161453c4db5ecb64"}, {"url": "https://git.kernel.org/stable/c/99f17d1cdb371cbd037975239b321f346d38f6d2"}, {"url": "https://git.kernel.org/stable/c/cfb30645280a2131e46cbd1b9a38cfd3ff893f12"}, {"url": "https://git.kernel.org/stable/c/b93ca6012712ecab2b551e120d7c95038d6a89e5"}, {"url": "https://git.kernel.org/stable/c/ab26e346322648f5c39de017d9723c9256284fce"}, {"url": "https://git.kernel.org/stable/c/fa1bd704940b5bcbc32c0b28db9167405c8ee5e0"}], "title": "batman-adv: tt: avoid empty VLAN responses", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: batman-adv: tt: avoid empty VLAN responses", "id": "2502623", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502623"}, "csaw": false, "cwe": "CWE-770", "details": ["A flaw was found in the Linux kernel's batman-adv (Better Approach To Mobile Ad-hoc Networking - Advanced) translation table module. This vulnerability could allow an attacker to cause network instability or a denial of service (DoS). The issue arises from the system sending inconsistent translation table type-length-value (TLVs) and empty VLAN responses, which can lead to 'TT request storms' within the network. The resolution prevents the sending of empty VLANs for replies, mitigating the risk of these inconsistencies."], "name": "CVE-2026-64090", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Fix deferred", "impact": "moderate", "package_name": "erlang27", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64090\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64090\nhttps://lore.kernel.org/linux-cve-announce/2026071917-CVE-2026-64090-b9d3@gregkh/T"]}

{}