CVE-2026-46238

Linux · kernel

The Linux kernel's batman-adv module is vulnerable to an issue involving the incorrect caching of unowned originator pointers in BAT IV.

Executive summary

An improper caching vulnerability in the Linux kernel batman-adv module requires immediate attention to prevent potential exploitation of the network stack.

Vulnerability

The vulnerability exists within the BAT IV implementation of the batman-adv module, where unowned originator pointers are incorrectly cached in certain paths. This flaw relates to how the kernel manages neighbor address lookups.

Business impact

With a CVSS score of 8.8, this vulnerability carries a high risk to network reliability and system security. Exploitation could lead to unauthorized network traffic manipulation or system-level instability, potentially impacting the availability of the affected network infrastructure.

Remediation

Immediate Action: Update the Linux kernel to the latest version provided by your vendor to ensure the fix for the batman-adv module is implemented.

Proactive Monitoring: Review kernel logs for anomalous network behavior or errors related to BAT IV path lookups.

Compensating Controls: Implement strict network segmentation and monitor for unusual traffic patterns within the mesh network environment.

Exploitation status

Public Exploit Available: false

Analyst recommendation

Administrators should treat this kernel update as a priority, especially in environments relying on B.A.T.M.A.N. advanced for mesh networking. Apply the official patches from your distribution maintainer as soon as they become available.