A time-of-check to time-of-use race condition in the Linux kernel batman-adv driver allows adjacent attackers to cause a denial of service or integrity impact.

This is a race condition vulnerability involving non-atomic checks in the batman-adv driver, which can be triggered by unauthenticated attackers with adjacent network access.

A successful exploit can cause system instability, kernel panics, or complete denial of service for affected mesh networking nodes. While the CVSS score of 7.1 highlights significant technical severity, the requirement for adjacent network access moderately limits the exposure surface for enterprise environments.

Immediate Action: Update the Linux kernel to version 5.10.259, 5.15.210, 6.1.176, 6.6.143, or later as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unexpected kernel panics, driver crashes, or anomalous network traffic patterns on mesh interfaces.

Compensating Controls: Restrict adjacent network access to trusted nodes and implement strict interface security policies to mitigate unauthorized interaction.

Public Exploit Available: false

Administrators managing systems utilizing the batman-adv module should prioritize patching the kernel to the latest stable release. Applying the vendor-supplied updates immediately will eliminate the race condition and prevent potential denial of service conditions.