CVE-2026-46212 batman-adv: bla: prevent use-after-free when deleting claims
A use-after-free in the batman-adv kernel module allows attackers to potentially execute code or escalate privileges when deleting backbone claims.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-46212?
CVE-2026-46212 is a high-severity use after free vulnerability in Linux kernel, published on 28 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: prevent use-after-free when deleting claims
When batadv_bla_del_backbone_claims() removes all claims for a backbone, it does this by dropping the link entry in the hash list. This list entry itself was one of the references which need to be dropped at the same time via batadv_claim_put().
But the batadv_claim_put() must not be done before the last access to the claim object in this function. Otherwise the claim might be freed already by the batadv_claim_release() function before the list entry was dropped.
Weakness: CWE-416
Which versions are affected by CVE-2026-46212?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-46212?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-46212 being exploited?
There is no known exploitation of CVE-2026-46212 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-89048, BELL-CVE-2026-46212, DEBIAN-CVE-2026-46212, GHSA-3qfg-xvm7-p66x, ROOT-OS-DEBIAN-11-CVE-2026-46212, ROOT-OS-DEBIAN-12-CVE-2026-46212 and 3 more.