Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:19:21 +0000 CVE-2025-39839 — batman-adv: fix OOB read/write in network-coding decode https://vulnerability.circl.lu/vuln/cve-2025-39839 <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCH328, Siemens SCALANCE XCM324, Siemens SCALANCE XCM328, Siemens SCALANCE XCM332, Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC), Siemens SCALANCE XRM334 (230 V AC, 12xFO), Siemens SCALANCE XRM334 (230 V AC, 8xFO) and 8 more</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: fix OOB read/write in network-coding decode</p> <p>batadv_nc_skb_decode_packet() trusts coded_len and checks only against skb-&gt;len. XOR starts at sizeof(struct batadv_unicast_packet), reducing payload headroom, and the source skb length is not verified, allowing an out-of-bounds read and a small out-of-bounds write.</p> <p>Validate that coded_len fits within the payload area of both destination and source sk_buffs before XORing.</p> <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCH328, Siemens SCALANCE XCM324, Siemens SCALANCE XCM328, Siemens SCALANCE XCM332, Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC), Siemens SCALANCE XRM334 (230 V AC, 12xFO), Siemens SCALANCE XRM334 (230 V AC, 8xFO) and 8 more</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: fix OOB read/write in network-coding decode</p> <p>batadv_nc_skb_decode_packet() trusts coded_len and checks only against skb-&gt;len. XOR starts at sizeof(struct batadv_unicast_packet), reducing payload headroom, and the source skb length is not verified, allowing an out-of-bounds read and a small out-of-bounds write.</p> <p>Validate that coded_len fits within the payload area of both destination and source sk_buffs before XORing.</p> https://vulnerability.circl.lu/vuln/cve-2025-39839