CVE-2026-46212

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when deleting claims When batadv_bla_del_backbone_claims() removes all claims for a backbone, it does this by dropping the link entry in the hash list. This list entry itself was one of the references which need to be dropped at the same time via batadv_claim_put(). But the batadv_claim_put() must not be done before the last access to the claim object in this function. Otherwise the claim might be freed already by the batadv_claim_release() function before the list entry was dropped.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*

History

10 Jun 2026, 19:16

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE CWE-416
References () https://git.kernel.org/stable/c/00155f336a5e8b1006d2ca9ae7ad8fc4a44bb401 - () https://git.kernel.org/stable/c/00155f336a5e8b1006d2ca9ae7ad8fc4a44bb401 - Patch
References () https://git.kernel.org/stable/c/0cc9847c64cb6e61118bc78c9187c8209a7197fa - () https://git.kernel.org/stable/c/0cc9847c64cb6e61118bc78c9187c8209a7197fa - Patch
References () https://git.kernel.org/stable/c/1d4b241482d9025c537afb3c7c8419c72c0e0c82 - () https://git.kernel.org/stable/c/1d4b241482d9025c537afb3c7c8419c72c0e0c82 - Patch
References () https://git.kernel.org/stable/c/368449e467d5f1e2c2e987bf2bd57000ba75e10b - () https://git.kernel.org/stable/c/368449e467d5f1e2c2e987bf2bd57000ba75e10b - Patch
References () https://git.kernel.org/stable/c/4ae1709a314060a196981b344610d023ea841e57 - () https://git.kernel.org/stable/c/4ae1709a314060a196981b344610d023ea841e57 - Patch
References () https://git.kernel.org/stable/c/6c5dc6d68e6ba7f0224a757a39ed52fcdb54d472 - () https://git.kernel.org/stable/c/6c5dc6d68e6ba7f0224a757a39ed52fcdb54d472 - Patch
References () https://git.kernel.org/stable/c/a1a99837bb6169cfb9187abaa2005e8f12079426 - () https://git.kernel.org/stable/c/a1a99837bb6169cfb9187abaa2005e8f12079426 - Patch
References () https://git.kernel.org/stable/c/b88c865dcf6e9f20bfe66a360d4b62941ef769b8 - () https://git.kernel.org/stable/c/b88c865dcf6e9f20bfe66a360d4b62941ef769b8 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/1d4b241482d9025c537afb3c7c8419c72c0e0c82 -
  • () https://git.kernel.org/stable/c/a1a99837bb6169cfb9187abaa2005e8f12079426 -
  • () https://git.kernel.org/stable/c/b88c865dcf6e9f20bfe66a360d4b62941ef769b8 -

30 May 2026, 11:17

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8

28 May 2026, 10:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-05-28 10:16

Updated : 2026-06-10 19:16


NVD link : CVE-2026-46212

Mitre link : CVE-2026-46212

CVE.ORG link : CVE-2026-46212


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free