Linux Kernel Mesh Interface Vulnerability Affects batman-adv

CVE-2026-46208

What is CVE-2026-46208?

A vulnerability in the batman-adv module of the Linux kernel allows tp_meter sessions to remain active even after a mesh interface is being torn down. This situation can cause processing to continue on sessions that are no longer valid, posing significant risks during the cleanup process. The affected module now synchronizes tp_meter operations with the mesh interface lifecycle, ensuring that all active sessions are stopped, and their corresponding threads are safely exited before the teardown proceeds. This update enhances the robustness of mesh networks operating under batman-adv by preventing potential race conditions and ensuring complete shutdown of resources.

References