CVE-2026-64094

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL-pointer dereference occurs in the batman-adv module when a hard interface is retrieved as the primary interface of a mesh interface but becomes decoupled from it before the rtnl lock is held. This results in the pointer from the primary hard interface to the mesh interface being set to NULL. The issue manifests when the system attempts to send an ARP request using the mesh interface without first verifying that the mesh iface is non-NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.