CVE 7.8 HIGH

batman-adv: stop tp_meter sessions during mesh teardown_CVE-2026-46208

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: stop tp_meter sessions during mesh teardown

TP meter sessions remain linked on bat_priv->tp_list after the netlink
request has already finished. When the mesh interface is removed,
batadv_mesh_free() currently tears down the mesh without first draining
these sessions.

A running sender thread or a late incoming tp_meter packet can then keep
processing against a mesh instance which is already shutting down.
Synchronize tp_meter with the mesh lifetime by stopping all active
sessions from batadv_mesh_free() and waiting for sender threads to exit
before teardown continues.

Basic Information

ID CVE-2026-46208
Source Linux
Published May 28, 2026 at 09:40
Modified May 30, 2026 at 10:49

Affected Product

Vendor Linux
Product Linux
Version 33a3bb4a3345bb511f9c69c913da95d4693e2a4e
Affected Versions Linux Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e
Linux Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e
Linux Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e
Linux Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e
Linux Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e
Linux Linux 4.8

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.