CVE-2026-52931

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the batman-adv module where the functions batadv tp recv ack() and batadv tp stop() incorrectly process tp vars when the role is set to BATADV TP RECEIVER. In this state, the system reads uninitialized sender-only members, resulting in undefined behavior. This can be triggered if a node acting as a receiver in a tp meter session receives a malicious ACK packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.