AZL-88839
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88839.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-88839
- Upstream
- Published
- 2026-05-28T10:16:36Z
- Modified
- 2026-08-28T17:48:09.929492233Z
- Summary
- CVE-2026-46208 affecting package kernel for versions less than 6.6.141.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: stop tp_meter sessions during mesh teardown
TP meter sessions remain linked on batpriv->tplist after the netlink request has already finished. When the mesh interface is removed, batadvmeshfree() currently tears down the mesh without first draining these sessions.
A running sender thread or a late incoming tpmeter packet can then keep processing against a mesh instance which is already shutting down. Synchronize tpmeter with the mesh lifetime by stopping all active sessions from batadvmeshfree() and waiting for sender threads to exit before teardown continues.
- References