batman-adv: bla: only purge non-released claims

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2026-46233
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-05-28 10:16:38 UTC
Updated2026-06-10 21:11:45 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: only purge non-released claims When batadv_bla_purge_claims() goes through the list of claims, it is only traversing the hash list with an rcu_read_lock(). Due to a potential parallel batadv_claim_put(), it can happen that it encounters a claim which was actually in the process of being released+freed by batadv_claim_release(). In this case, backbone_gw is set to NULL before the delayed RCU kfree is started. Calling batadv_bla_claim_get_backbone_gw() is then no longer allowed because it would cause a NULL-ptr derefence. To avoid this, only claims with a valid reference counter must be purged. All others are already taken care of.

Risk And Classification

Primary CVSS: v3.1 5.5 MEDIUM from [email protected]

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.000320000 probability, percentile 0.097350000 (date 2026-06-04)

Problem Types: CWE-476

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Linux Linux Kernel All All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 23721387c409087fd3b97e274f34d3ddc0970b74 a9f58d5e3261f3deeae69ec1e237f38ef3ff5cbe git Not specified
CNA Linux Linux affected 23721387c409087fd3b97e274f34d3ddc0970b74 6725c523a35eeca611ff37e7d4a8712fae92aefd git Not specified
CNA Linux Linux affected 23721387c409087fd3b97e274f34d3ddc0970b74 afb5436f6028fd68f408f189230fbaa19c910d72 git Not specified
CNA Linux Linux affected 23721387c409087fd3b97e274f34d3ddc0970b74 7b8fbcee3184d848b5aee085ca16d0cf05c9b641 git Not specified
CNA Linux Linux affected 23721387c409087fd3b97e274f34d3ddc0970b74 7b7ebb7222a5524ce58e48cc9c6d688320ea6cfe git Not specified
CNA Linux Linux affected 23721387c409087fd3b97e274f34d3ddc0970b74 b65365d2b1e6095c538d49baeb140dd1c166c1b3 git Not specified
CNA Linux Linux affected 23721387c409087fd3b97e274f34d3ddc0970b74 ab3dbd07a809a8eb30c7ddfab9ac886ed30dce8d git Not specified
CNA Linux Linux affected 23721387c409087fd3b97e274f34d3ddc0970b74 cf6b604011591865ae39ac82de8978c1120d17af git Not specified
CNA Linux Linux affected 3.5 Not specified
CNA Linux Linux unaffected 3.5 semver Not specified
CNA Linux Linux unaffected 5.10.258 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.209 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.175 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.140 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.90 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.32 6.18.* semver Not specified
CNA Linux Linux unaffected 7.0.9 7.0.* semver Not specified
CNA Linux Linux unaffected 7.1-rc4 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/a9f58d5e3261f3deeae69ec1e237f38ef3ff5cbe 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/ab3dbd07a809a8eb30c7ddfab9ac886ed30dce8d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/7b8fbcee3184d848b5aee085ca16d0cf05c9b641 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/6725c523a35eeca611ff37e7d4a8712fae92aefd 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/b65365d2b1e6095c538d49baeb140dd1c166c1b3 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/7b7ebb7222a5524ce58e48cc9c6d688320ea6cfe 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/afb5436f6028fd68f408f189230fbaa19c910d72 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/cf6b604011591865ae39ac82de8978c1120d17af 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report