CVE-2026-64095
kernel: batman-adv: bla: avoid double decrement of bla.num_requests
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's batman-adv module, which handles bridge loop avoidance. A race condition allows the bla.num_requests counter to be decremented multiple times due to non-atomic operations. This can lead to an inconsistent state within the kernel, potentially enabling a local attacker to cause a denial of service (DoS) by impacting network stability or system resources.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition