CVE-2026-46231
BLA Reference Leak in Linux Kernel batman-adv
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel component batman-adv, specifically in the bla (batman-adv link aggregation) module. When the function batadv_bla_add_claim() fails to insert a new claim into a hash table, it incorrectly leaks a reference to the backbone gateway (backbone_gw) object that the claim was intended for. This means that the reference count to the backbone_gw object is not properly released on error, potentially causing a resource leak.
How can this vulnerability impact me? :
The impact of this vulnerability is a resource leak in the Linux kernel's batman-adv module. Specifically, leaking references to backbone gateway objects can lead to increased memory usage or resource exhaustion over time, which might degrade system performance or stability. However, there is no indication that this vulnerability leads to privilege escalation, data corruption, or remote code execution.