CVE-2026-52931
kernel: batman-adv: tp_meter: avoid use of uninit sender vars
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 24, 2026
Updated · October 20, 2026
Description
A flaw was found in the batman-adv tp_meter module of the Linux kernel. A remote attacker could exploit this vulnerability by sending a specially crafted acknowledgment (ACK) packet to a node configured as a receiver in an ongoing tp_meter session. This could lead to the use of uninitialized sender variables, resulting in undefined behavior and potentially a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-824 · Access of Uninitialized Pointer