CVE-2026-46208
kernel: batman-adv: stop tp_meter sessions during mesh teardown
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 28, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's batman-adv module. When a mesh interface is removed, the batadv_mesh_free() function does not properly stop tp_meter sessions. This oversight allows active tp_meter sender threads or late incoming packets to continue processing against a mesh instance that is in the process of shutting down. This can lead to system instability and a denial of service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-366 · Race Condition within a Thread