CVE-2026-46212

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-46212
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46212.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-46212
Downstream
Related
Published
2026-05-28T09:40:29.712Z
Modified
2026-07-21T09:52:44.257613652Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
batman-adv: bla: prevent use-after-free when deleting claims
Details

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: bla: prevent use-after-free when deleting claims

When batadvbladelbackboneclaims() removes all claims for a backbone, it does this by dropping the link entry in the hash list. This list entry itself was one of the references which need to be dropped at the same time via batadvclaimput().

But the batadvclaimput() must not be done before the last access to the claim object in this function. Otherwise the claim might be freed already by the batadvclaimrelease() function before the list entry was dropped.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46212.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
23721387c409087fd3b97e274f34d3ddc0970b74
Fixed
1d4b241482d9025c537afb3c7c8419c72c0e0c82
Fixed
a1a99837bb6169cfb9187abaa2005e8f12079426
Fixed
b88c865dcf6e9f20bfe66a360d4b62941ef769b8
Fixed
368449e467d5f1e2c2e987bf2bd57000ba75e10b
Fixed
6c5dc6d68e6ba7f0224a757a39ed52fcdb54d472
Fixed
00155f336a5e8b1006d2ca9ae7ad8fc4a44bb401
Fixed
0cc9847c64cb6e61118bc78c9187c8209a7197fa
Fixed
4ae1709a314060a196981b344610d023ea841e57

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46212.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.5.0
Fixed
5.10.258
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.209
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.175
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.140
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.90
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.32
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46212.json"