PT-2026-44335 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46212

Mitre

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: bla: prevent use-after-free when deleting claims

When batadv bla del backbone claims() removes all claims for a backbone, it does this by dropping the link entry in the hash list. This list entry itself was one of the references which need to be dropped at the same time via batadv claim put().

But the batadv claim put() must not be done before the last access to the claim object in this function. Otherwise the claim might be freed already by the batadv claim release() function before the list entry was dropped.

Related Identifiers

CVE-2026-46212

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46212 · Security Note
• https://git.kernel.org/stable/c/00155f336a5e8b1006d2ca9ae7ad8fc4a44bb401 · Note
• https://git.kernel.org/stable/c/4ae1709a314060a196981b344610d023ea841e57 · Note
• https://git.kernel.org/stable/c/0cc9847c64cb6e61118bc78c9187c8209a7197fa · Note
• https://git.kernel.org/stable/c/368449e467d5f1e2c2e987bf2bd57000ba75e10b · Note
• https://git.kernel.org/stable/c/6c5dc6d68e6ba7f0224a757a39ed52fcdb54d472 · Note