CVE-2026-52913

Analyzed Analyzed - Analysis Complete

NULL Pointer Dereference in Linux Kernel batman-adv

Publication date: 2026-06-24

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: stop OGMv2 on disabled interface When a batadv_hard_iface is disabled, its mesh_iface pointer is set to NULL. However, batadv_v_ogm_send_meshif() may still dispatch OGMs via batadv_v_ogm_queue_on_if() for interfaces that have since lost their mesh_iface association. This results in a NULL pointer dereference when batadv_v_ogm_queue_on_if() unconditionally calls netdev_priv() on the now NULL hard_iface->mesh_iface to retrieve the batadv_priv. It is necessary to ensure that the batadv_v_ogm_queue_on_if() checks that it is using the same mesh_iface for which batadv_v_ogm_send_meshif() was called.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-08

Generated

2026-07-14

AI Q&A

2026-06-24

EPSS Evaluated

2026-07-13

NVD

CVE-2026-52913

EUVD

EUVD-2026-38716

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.13 (inc) to 6.18.34 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.11 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.176 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.143 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.93 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.210 (exc)
linux	linux_kernel	From 4.6 (inc) to 5.10.259 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's batman-adv component, specifically related to the handling of disabled network interfaces in mesh networking.

When a batadv_hard_iface (a hard network interface in the batman-adv mesh) is disabled, its mesh_iface pointer is set to NULL. However, the function batadv_v_ogm_send_meshif() may still attempt to send Originator Messages (OGMs) through batadv_v_ogm_queue_on_if() on interfaces that no longer have a valid mesh_iface association.

Because batadv_v_ogm_queue_on_if() calls netdev_priv() on the mesh_iface without checking if it is NULL, this leads to a NULL pointer dereference, which can cause a kernel crash or instability.

The fix involves ensuring that batadv_v_ogm_queue_on_if() verifies it is operating on the correct mesh_iface before proceeding.

Impact Analysis

This vulnerability can cause a NULL pointer dereference in the Linux kernel's batman-adv mesh networking component.

The impact of this is likely a kernel crash or system instability, which can lead to denial of service (DoS) conditions on affected systems using batman-adv for mesh networking.

Such crashes can disrupt network connectivity and potentially require system reboots to recover.

Mitigation Strategies

To mitigate this vulnerability, ensure that your Linux kernel is updated to a version where the batman-adv module includes the fix that stops OGMv2 on disabled interfaces.

Specifically, the fix involves ensuring that batadv_v_ogm_queue_on_if() checks that it is using the same mesh_iface for which batadv_v_ogm_send_meshif() was called, preventing NULL pointer dereference.

Until the patch is applied, avoid disabling batadv_hard_iface interfaces or monitor the batman-adv module behavior closely to prevent triggering this issue.

Hi! I’m here to help you understand CVE-2026-52913. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70