CVE-2026-43382
kernel: batman-adv: Avoid double-rtnl_lock ELP metric worker
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 8, 2026
Updated · June 28, 2026
Description
A flaw was found in the batman-adv module of the Linux kernel. This vulnerability occurs when the batadv_v_elp_get_throughput() function attempts to acquire a network lock (RTNL lock) that is already held, particularly during the cancellation of a work queue item. This can lead to a deadlock, causing a Denial of Service (DoS) for the affected system.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-833 · Deadlock