Reference Leak in Linux Kernel's batman-adv Component

CVE-2026-46231

What is CVE-2026-46231?

This vulnerability in the batman-adv module of the Linux kernel occurs when the batadv_bla_add_claim() function fails to insert a claim into the hash. In such cases, a reference to the backbone gateway intended for the claim is leaked, which can lead to improper memory management. The recommended action in the error handling path is to call batadv_backbone_gw_put() to correctly release the reference and prevent memory leaks related to the backbone_gw object.

References