A high-severity vulnerability in the Linux kernel batman-adv module could allow an adjacent attacker to trigger a denial of service or potentially execute arbitrary code.

The batadv_tp_sender_cleanup function fails to synchronize timer deletion correctly, allowing the timer to re-arm during cleanup. This is an unauthenticated vulnerability requiring adjacent network access.

The vulnerability carries a CVSS score of 8.8, indicating a high risk to system availability and integrity. Successful exploitation could result in kernel-level crashes, leading to significant service disruption and potential unauthorized system modification.

Immediate Action: Update the Linux kernel to version 5.15.210, 6.1.176, 6.6.143, 6.12.93, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or batman-adv related errors that may indicate exploitation attempts.

Compensating Controls: Restrict network access to the batman-adv protocol to trusted interfaces only, reducing the attack surface for adjacent network threats.

Public Exploit Available: Unknown

Given the high CVSS score and the critical nature of the Linux kernel, organizations should prioritize patching this issue during their next maintenance cycle. Ensure that all kernel updates are tested in a staging environment before deployment to production systems.