Linux Kernel Vulnerability in Batman-adv Mesh Networking

CVE-2026-46206

What is CVE-2026-46206?

A vulnerability in the batman-adv implementation of the Linux kernel allows for the improper management of tp_meter sessions during the teardown phase. This issue occurs when the mesh state transitions out of BATADV_MESH_ACTIVE, leading to the potential startup of new sender or receiver sessions, which should be prevented during this state change. Proper handling of these sessions is essential to maintain network security and stability, ensuring that inactive sessions do not interfere with active mesh networking operations.

References