CVE-2026-46206

kernel: batman-adv: reject new tp_meter sessions during teardown

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's batman-adv module, specifically in the tp_meter component. This vulnerability allows tp_meter to initiate new sender or receiver sessions even after the mesh state has exited BATADV_MESH_ACTIVE. This improper state management could lead to unexpected behavior or instability within the network mesh.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-754 · Improper Check for Unusual or Exceptional Conditions