CVE-2026-46233
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
batman-adv: bla: only purge non-released claims
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: only purge non-released claims When batadv_bla_purge_claims() goes through the list of claims, it is only traversing the hash list with an rcu_read_lock(). Due to a potential parallel batadv_claim_put(), it can happen that it encounters a claim which was actually in the process of being released+freed by batadv_claim_release(). In this case, backbone_gw is set to NULL before the delayed RCU kfree is started. Calling batadv_bla_claim_get_backbone_gw() is then no longer allowed because it would cause a NULL-ptr derefence. To avoid this, only claims with a valid reference counter must be purged. All others are already taken care of.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 23721387c409087fd3b97e274f34d3ddc0970b74 | affected | git | a9f58d5e3261f3deeae69ec1e237f38ef3ff5cbe | Unavailable | None listed |
| 23721387c409087fd3b97e274f34d3ddc0970b74 | affected | git | 6725c523a35eeca611ff37e7d4a8712fae92aefd | Unavailable | None listed |
| 23721387c409087fd3b97e274f34d3ddc0970b74 | affected | git | afb5436f6028fd68f408f189230fbaa19c910d72 | Unavailable | None listed |
| 23721387c409087fd3b97e274f34d3ddc0970b74 | affected | git | 7b8fbcee3184d848b5aee085ca16d0cf05c9b641 | Unavailable | None listed |
| 23721387c409087fd3b97e274f34d3ddc0970b74 | affected | git | 7b7ebb7222a5524ce58e48cc9c6d688320ea6cfe | Unavailable | None listed |
| 23721387c409087fd3b97e274f34d3ddc0970b74 | affected | git | b65365d2b1e6095c538d49baeb140dd1c166c1b3 | Unavailable | None listed |
| 23721387c409087fd3b97e274f34d3ddc0970b74 | affected | git | ab3dbd07a809a8eb30c7ddfab9ac886ed30dce8d | Unavailable | None listed |
| 23721387c409087fd3b97e274f34d3ddc0970b74 | affected | git | cf6b604011591865ae39ac82de8978c1120d17af | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.5 | Unavailable | None listed |
| 5.10.258 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.209 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.175 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.140 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.90 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.32 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.0.9 | unaffected | semver | Unavailable | 7.0.* | None listed |
| 7.1 | unaffected | original_commit_for_fix | Unavailable | * | None listed |