High 7.8Published May 28, 2026

CVE-2026-46206batman-adv: reject new tp_meter sessions during teardown

Updated under an hour ago (Oct 27, 2026, 7:10 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject new tp_meter sessions during teardown Prevent tp_meter from starting new sender or receiver sessions after mesh_state has left BATADV_MESH_ACTIVE.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	33a3bb4a3345bb511f9c69c913da95d4693e2a4e builds before 0a7a840074c9ca5ebffc9c52358c8ea55828ec71; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before dcff44644bb518598b1a6be722706d6174b2f6a1; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before 52e6ec3e972cf27792cc1559874dbee19f286869; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before e4a3c4a4c8f6efd243c3e448c05b7bebcbf7b3b6; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before ff93f86ecbb50a4709c403fc279a396e308edde5; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before e1e2194cc725ec1d41f9412496212f0fa0519c36; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before ca39545cf07c142b39d474a1439a046bf28def3d; from 33a3bb4a3345bb511f9c69c913da95d4693e2a4e before 3243543592425beec83d453793e9d27caa0d8e66	CNA record
linux linux_kernel linux:linux_kernel	from 4.8 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.90; from 6.13 before 6.18.32; from 6.19 before 7.0.9; 7.1; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/0a7a840074c9ca5ebffc9c52358c8ea55828ec71	patch
https://git.kernel.org/stable/c/dcff44644bb518598b1a6be722706d6174b2f6a1	patch
https://git.kernel.org/stable/c/52e6ec3e972cf27792cc1559874dbee19f286869	patch
https://git.kernel.org/stable/c/e4a3c4a4c8f6efd243c3e448c05b7bebcbf7b3b6	patch
https://git.kernel.org/stable/c/ff93f86ecbb50a4709c403fc279a396e308edde5	patch
https://git.kernel.org/stable/c/e1e2194cc725ec1d41f9412496212f0fa0519c36	patch
https://git.kernel.org/stable/c/ca39545cf07c142b39d474a1439a046bf28def3d	patch
https://git.kernel.org/stable/c/3243543592425beec83d453793e9d27caa0d8e66	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.