CVE-2026-46233

A flaw was found in the Linux kernel's batman-adv module. This vulnerability allows a local attacker to trigger a NULL-pointer dereference within the batadv_bla_purge_claims() function. This issue arises from a timing conflict when a claim is being released simultaneously, causing a critical pointer to become invalid. Successful exploitation of this flaw can lead to a system crash, resulting in a denial of service (DoS).