CVE-2026-52913

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the batman-adv module. When a batadv hard iface is disabled, its mesh iface pointer is set to NULL. The function batadv v ogm send meshif() may still dispatch Originator Messages (OGMs) via batadv v ogm queue on if() for interfaces that have lost their mesh iface association. This leads to a crash when batadv v ogm queue on if() calls netdev priv() on the NULL hard iface->mesh iface to retrieve the batadv priv.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.