CVE-2026-46208

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: stop tp_meter sessions during mesh teardown

TP meter sessions remain linked on batpriv->tplist after the netlink request has already finished. When the mesh interface is removed, batadvmeshfree() currently tears down the mesh without first draining these sessions.

A running sender thread or a late incoming tpmeter packet can then keep processing against a mesh instance which is already shutting down. Synchronize tpmeter with the mesh lifetime by stopping all active sessions from batadvmeshfree() and waiting for sender threads to exit before teardown continues.