CVE-2026-46233

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-46233
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: only purge non-released claims When batadv_bla_purge_claims() goes through the list of claims, it is only traversing the hash list with an rcu_read_lock(). Due to a potential parallel batadv_claim_put(), it can happen that it encounters a claim which was actually in the process of being released+freed by batadv_claim_release(). In this case, backbone_gw is set to NULL before the delayed RCU kfree is started. Calling batadv_bla_claim_get_backbone_gw() is then no longer allowed because it would cause a NULL-ptr derefence. To avoid this, only claims with a valid reference counter must be purged. All others are already taken care of.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6725c523a35eeca611ff37e7d4a8712fae92aefd Patch
https://git.kernel.org/stable/c/7b7ebb7222a5524ce58e48cc9c6d688320ea6cfe Patch
https://git.kernel.org/stable/c/7b8fbcee3184d848b5aee085ca16d0cf05c9b641 Patch
https://git.kernel.org/stable/c/a9f58d5e3261f3deeae69ec1e237f38ef3ff5cbe Patch
https://git.kernel.org/stable/c/ab3dbd07a809a8eb30c7ddfab9ac886ed30dce8d Patch
https://git.kernel.org/stable/c/afb5436f6028fd68f408f189230fbaa19c910d72 Patch
https://git.kernel.org/stable/c/b65365d2b1e6095c538d49baeb140dd1c166c1b3 Patch
https://git.kernel.org/stable/c/cf6b604011591865ae39ac82de8978c1120d17af Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
History

10 Jun 2026, 21:11

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/6725c523a35eeca611ff37e7d4a8712fae92aefd - () https://git.kernel.org/stable/c/6725c523a35eeca611ff37e7d4a8712fae92aefd - Patch
References () https://git.kernel.org/stable/c/7b7ebb7222a5524ce58e48cc9c6d688320ea6cfe - () https://git.kernel.org/stable/c/7b7ebb7222a5524ce58e48cc9c6d688320ea6cfe - Patch
References () https://git.kernel.org/stable/c/7b8fbcee3184d848b5aee085ca16d0cf05c9b641 - () https://git.kernel.org/stable/c/7b8fbcee3184d848b5aee085ca16d0cf05c9b641 - Patch
References () https://git.kernel.org/stable/c/a9f58d5e3261f3deeae69ec1e237f38ef3ff5cbe - () https://git.kernel.org/stable/c/a9f58d5e3261f3deeae69ec1e237f38ef3ff5cbe - Patch
References () https://git.kernel.org/stable/c/ab3dbd07a809a8eb30c7ddfab9ac886ed30dce8d - () https://git.kernel.org/stable/c/ab3dbd07a809a8eb30c7ddfab9ac886ed30dce8d - Patch
References () https://git.kernel.org/stable/c/afb5436f6028fd68f408f189230fbaa19c910d72 - () https://git.kernel.org/stable/c/afb5436f6028fd68f408f189230fbaa19c910d72 - Patch
References () https://git.kernel.org/stable/c/b65365d2b1e6095c538d49baeb140dd1c166c1b3 - () https://git.kernel.org/stable/c/b65365d2b1e6095c538d49baeb140dd1c166c1b3 - Patch
References () https://git.kernel.org/stable/c/cf6b604011591865ae39ac82de8978c1120d17af - () https://git.kernel.org/stable/c/cf6b604011591865ae39ac82de8978c1120d17af - Patch

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/6725c523a35eeca611ff37e7d4a8712fae92aefd -
  • () https://git.kernel.org/stable/c/a9f58d5e3261f3deeae69ec1e237f38ef3ff5cbe -
  • () https://git.kernel.org/stable/c/afb5436f6028fd68f408f189230fbaa19c910d72 -

28 May 2026, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-28 10:16

Updated : 2026-06-10 21:11

NVD link : CVE-2026-46233

Mitre link : CVE-2026-46233

CVE.ORG link : CVE-2026-46233

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference