CVE-2026-31657

A flaw was found in the Linux kernel's batman-adv component. The batadv_bla_add_claim() function can improperly drop a reference to a backbone gateway while other parts of the code, such as the netlink claim dump path, still hold and attempt to use a pointer to the freed memory. This creates a use-after-free vulnerability, which could allow a local attacker to cause system instability or a denial of service (DoS).