CVE-2026-52931: batman-adv: tp_meter: avoid use of uninit sender vars
batman-adv: tpmeter: avoid use of uninit sender vars
Other sources
In the Linux kernel, the following vulnerability has been resolved:
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.105-1Fixed in 7.1.8-2Fixed in 7.1.10-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.180-1~deb11u1 - Configuration
In batadv_tp_recv_ack() and batadv_tp_stop(), after the tp_vars lookup, immediately verify tp_vars->role is BATADV_TP_SENDER and return/bail out if it is not, before accessing any sender-only members.
Linux kernel batman-adv (tp_meter) tp_vars->role validation = Check immediately after lookup and bail out unless role == BATADV_TP_SENDER
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52931?
CVE-2026-52931 has a risk score of 33, indicating a moderate level of severity.
How do I fix CVE-2026-52931?
To address CVE-2026-52931, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2026-52931?
CVE-2026-52931 affects the Linux kernel's batman-adv module.
What is the impact of CVE-2026-52931?
CVE-2026-52931 can lead to undefined behavior when uninitialized sender variables are used in certain roles.
When was CVE-2026-52931 published?
CVE-2026-52931 was published on June 24, 2026.