An integer handling flaw in the Linux kernel batman-adv protocol could lead to unexpected behavior or system compromise when processing network traffic.

The batadv_orig_node structure uses a signed 16-bit integer for tt_buff_len, which is not intended to be negative. This vulnerability is reachable via adjacent network access.

With a CVSS score of 8.8, this vulnerability poses a significant risk to network availability and system security. An attacker on the adjacent network could potentially trigger this flaw to cause a crash or gain unauthorized influence over packet processing.

Immediate Action: Update the Linux kernel to the versions specified in the stable tree (e.g., 6.1.175, 6.6.142) to ensure the integer type is corrected.

Proactive Monitoring: Observe network traffic patterns for anomalous batman-adv packets that might indicate attempted exploitation.

Compensating Controls: Use network segmentation to isolate nodes running the batman-adv protocol from untrusted or public network segments.

Public Exploit Available: Unknown. There is no confirmed public exploit in the available data.

Although exploitation requires local network presence, the high CVSS score necessitates prompt patching. Organizations utilizing mesh networking protocols should prioritize updating their kernel versions to remediate this flaw.