Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

CVE

CVE-2026-52931

batman-adv: tp_meter: avoid use of uninit sender vars
Back to all
CVE

CVE-2026-52931

batman-adv: tp_meter: avoid use of uninit sender vars

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: tp_meter: avoid use of uninit sender vars

batadvtprecvack() and batadvtpstop() are only valid for tpvars in the

BATADVTPSENDER role. When called with a BATADVTPRECEIVER role, it

proceeds to read sender-only members that were never initialized, leading

to undefined behavior.

This can be triggered when a node that is currently acting as a receiver in

an ongoing tp_meter session receives a malicious ACK packet.

Guard against this by checking tp_vars->role immediately after the

lookup and bailing out if it is not BATADVTPSENDER, before any of

those members are accessed.

Package Versions Affected

Package Version
patch Availability
No items found.

Automatically patch vulnerabilities without upgrading

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

CVSS Version

Severity
Base Score
CVSS Version
Score Vector
C
H
U
9.8
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
0
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
-

Related Resources

No items found.

References

https://git.kernel.org/stable/c/0e388af04b3958b178a1b979527f93eb46ea1fee, https://git.kernel.org/stable/c/1a21c055f66e78973712a4a1be2a554f1ee2e4f4, https://git.kernel.org/stable/c/53f931e0146ae5bdab4cba302646827d06b3794b, https://git.kernel.org/stable/c/6c65cf23d4c6170fcf5714c32aa64689718cb142, https://git.kernel.org/stable/c/85397e48afe6be83ffca5ad3f4792296bfc81d3d, https://git.kernel.org/stable/c/9884c9c02d3c90e9215db3c5128f59045d20ae91, https://git.kernel.org/stable/c/dc2ae5fbd2dadc26735092f140b246841d969a11, https://git.kernel.org/stable/c/ecdaa3e4d91040206afe21bc8a0d1198a0971ff3, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52931.json, https://nvd.nist.gov/vuln/detail/CVE-2026-52931, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Severity

9.8

CVSS Score
0
10

Basic Information

Base CVSS
9.8
EPSS Probability
0.00404%
EPSS Percentile
0.32716%
Introduced Version
33a3bb4a3345bb511f9c69c913da95d4693e2a4e,4.8.0,5.11.0,5.16.0,6.2.0,6.7.0,6.13.0,6.19.0,0
Fix Available
6c65cf23d4c6170fcf5714c32aa64689718cb142,5.10.258,5.15.209,6.1.175,6.6.142,6.12.92,6.18.34,7.0.11,6.1.176-1,5.10.259-1,6.1.176-1~deb11u1,6.12.94-1

Fix Critical Vulnerabilities Instantly

Secure your app without upgrading.
Fix Without Upgrading