CVE-2026-64093

A flaw was found in the batman-adv component of the Linux kernel. A race condition exists where a timer can be re-armed after its associated reference has been removed during cleanup. This can occur when batadv_tp_sender_cleanup() attempts to shut down a timer, but a separate execution context re-arms it before it is fully disarmed. An attacker could potentially exploit this to cause a use-after-free, leading to a denial of service.