CVE-2026-64095

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Time-of-Check to Time-of-Use (TOCTOU) issue exists in the batman-adv module. The bla.num requests variable is incremented and decremented across various operations, such as receiving announcements, purging backbones, and periodic work. Because the checks for the request sent state and the subsequent atomic operations are not performed atomically, concurrent execution can lead to a double decrement of bla.num requests. This occurs when batadv bla send request() is interrupted after setting request sent to 1, allowing batadv handle announce() to reset the state and decrement the counter before the original increment is completed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.