Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64094

batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl_lock held, a hardif might be retrieved as primary interface of a meshif, but then (while operating on this interface) getting decoupled from the mesh interface. In this case, the meshif still exists but the pointer from the primary hardif to the meshif is set to NULL. The mesh_iface must be checked first to be non-NULL before continuing to send an ARP request using meshif.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 23721387c409087fd3b97e274f34d3ddc0970b74 to < 4f6266735a0ba6a568b6d4c9fa51c33a5a7f2d70affected
  • 23721387c409087fd3b97e274f34d3ddc0970b74 to < 53cb3511f6eda37d3bd923545fdba6013b6d7bb7affected
  • 23721387c409087fd3b97e274f34d3ddc0970b74 to < efb62458c94db1fe3a287e7e89c31b0cfb03f938affected
  • 23721387c409087fd3b97e274f34d3ddc0970b74 to < 2a8c9e86529156c62d9187b9ed9454c31665ad33affected
  • 23721387c409087fd3b97e274f34d3ddc0970b74 to < 0f3ebd7bb417aabc44853cc7c2a184ebb0e05b45affected
  • 23721387c409087fd3b97e274f34d3ddc0970b74 to < 6921a7683ae9ad0208d829e71f725a9e25ccff49affected
  • 23721387c409087fd3b97e274f34d3ddc0970b74 to < 555b8d3f5c313d81d46274fd0976352dafc80124affected
  • 23721387c409087fd3b97e274f34d3ddc0970b74 to < f80d3d98d2ff78d9e2fe5d68b1f45948c4f7bd24affected

Linux Linux

Default version status: affected

  • 3.5affected
  • 0 to < 3.5unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.34 to ≤ 6.18.*unaffected
  • 7.0.11 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References