CVE-2026-46231
batman-adv: bla: put backbone reference on failed claim hash insert
Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert When batadv_bla_add_claim() fails to insert a new claim into the hash, it leaked a reference to the backbone_gw for which the claim was intended. Call batadv_backbone_gw_put() on the error path to release the reference and avoid leaking the backbone_gw object.
INFO
Published Date :
May 28, 2026, 10:16 a.m.
Last Modified :
June 10, 2026, 9:12 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Apply the kernel patch for batman-adv.
- Update the Linux kernel to a fixed version.
- Ensure batadv_backbone_gw_put is called on error.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-46231.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-46231 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-46231
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-46231 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-46231 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jun. 10, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.16.39 up to (excluding) 3.17 *cpe:2.3:o:linux:linux_kernel:4.7:-:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.175 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.209 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.140 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.32 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.90 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.9 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.4.217 up to (excluding) 4.5 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.7.1 up to (excluding) 5.10.258 Added Reference Type kernel.org: https://git.kernel.org/stable/c/0baf4b659cdc7305cf685b5a5d60f9e3816ab5d0 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/2888c9a154123db0254ae4fb9bea570c7e1f2e06 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/65419eb4259a26a3cd3f56fa0e3b3c113bf8c256 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/6c8b68a7ed667a63aa603ba4d3a7088be143007e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/769f413d374ff2b6ff6d8d8c37b4c1178e6cdf14 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/7cccf4eb4f96d3c3af91a00b7a9caa652439542e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ba9d20ee9076dac32c371116bacbe72480eb356c Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/fd0ca034c1e71ca7613cde9dd892836b2c2831bd Types: Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 01, 2026
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/2888c9a154123db0254ae4fb9bea570c7e1f2e06 Added Reference https://git.kernel.org/stable/c/6c8b68a7ed667a63aa603ba4d3a7088be143007e Added Reference https://git.kernel.org/stable/c/769f413d374ff2b6ff6d8d8c37b4c1178e6cdf14 -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 28, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert When batadv_bla_add_claim() fails to insert a new claim into the hash, it leaked a reference to the backbone_gw for which the claim was intended. Call batadv_backbone_gw_put() on the error path to release the reference and avoid leaking the backbone_gw object. Added Reference https://git.kernel.org/stable/c/0baf4b659cdc7305cf685b5a5d60f9e3816ab5d0 Added Reference https://git.kernel.org/stable/c/65419eb4259a26a3cd3f56fa0e3b3c113bf8c256 Added Reference https://git.kernel.org/stable/c/7cccf4eb4f96d3c3af91a00b7a9caa652439542e Added Reference https://git.kernel.org/stable/c/ba9d20ee9076dac32c371116bacbe72480eb356c Added Reference https://git.kernel.org/stable/c/fd0ca034c1e71ca7613cde9dd892836b2c2831bd