CVE-2026-64093

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the batman-adv module within the tp meter component. The batadv tp sender cleanup() function previously used a combination of timer delete sync() and timer delete() to prevent a timer handler from re-arming itself. This approach relied on the sending status being set to 0, which could lead to a race condition. Specifically, if batadv tp recv ack() checks the sending status while batadv tp sender shutdown() is changing it to 0 and triggering batadv tp sender cleanup(), the timer could be re-armed after its reference has already been removed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.