CVE-2026-46208

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the batman-adv module, TP meter sessions remain linked on bat priv->tp list after a netlink request finishes. When the mesh interface is removed, the batadv mesh free() function tears down the mesh without draining these sessions. This allows a running sender thread or a late incoming tp meter packet to continue processing against a mesh instance that is already shutting down.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.