CVE-2026-93204

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the batman-adv module where MAC addresses are updated using a simple copy function within the batadv dat entry add() function. This lack of atomicity allows a parallel reader to access a partially updated MAC address. This can lead to the transmission of corrupted MAC addresses over the network or the creation of incorrect ARP responses, which may result in ARP cache poisoning. ARP cache poisoning is a technique where an attacker sends falsified ARP messages over a local area network to link their MAC address with the IP address of a legitimate computer or server on the network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.