PT-2026-44331 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46208

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: stop tp meter sessions during mesh teardown

TP meter sessions remain linked on bat priv->tp list after the netlink request has already finished. When the mesh interface is removed, batadv mesh free() currently tears down the mesh without first draining these sessions.

A running sender thread or a late incoming tp meter packet can then keep processing against a mesh instance which is already shutting down. Synchronize tp meter with the mesh lifetime by stopping all active sessions from batadv mesh free() and waiting for sender threads to exit before teardown continues.

Fix

Related Identifiers

CVE-2026-46208

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46208 · Security Note
• https://git.kernel.org/stable/c/3d3cf6a7314aca4df0a6dde28ce784a2a30d0166 · Note
• https://git.kernel.org/stable/c/03660dab86f93319178a24667f6998526dc4355d · Note
• https://git.kernel.org/stable/c/26dfeee8db81354bfdade155f27f9e16510ad196 · Note
• https://git.kernel.org/stable/c/8634c1dbd73adb74d40533ebb7e914efb82e71fb · Note
• https://git.kernel.org/stable/c/79bc0eaeef2c5797317bf2da8e3159a74d62ec47 · Note