Medium 5.5Published Jul 19, 2026

CVE-2026-64094batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface

Updated under an hour ago (Oct 27, 2026, 7:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl_lock held, a hardif might be retrieved as primary interface of a meshif, but then (while operating on this interface) getting decoupled from the mesh interface. In this case, the meshif still exists but the pointer from the primary hardif to the meshif is set to NULL. The mesh_iface must be checked first to be non-NULL before continuing to send an ARP request using meshif.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jul 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	23721387c409087fd3b97e274f34d3ddc0970b74 builds before 4f6266735a0ba6a568b6d4c9fa51c33a5a7f2d70; 23721387c409087fd3b97e274f34d3ddc0970b74 builds before 53cb3511f6eda37d3bd923545fdba6013b6d7bb7; from 23721387c409087fd3b97e274f34d3ddc0970b74 before efb62458c94db1fe3a287e7e89c31b0cfb03f938; 23721387c409087fd3b97e274f34d3ddc0970b74 builds before 2a8c9e86529156c62d9187b9ed9454c31665ad33; 23721387c409087fd3b97e274f34d3ddc0970b74 builds before 0f3ebd7bb417aabc44853cc7c2a184ebb0e05b45; 23721387c409087fd3b97e274f34d3ddc0970b74 builds before 6921a7683ae9ad0208d829e71f725a9e25ccff49; 23721387c409087fd3b97e274f34d3ddc0970b74 builds before 555b8d3f5c313d81d46274fd0976352dafc80124; from 23721387c409087fd3b97e274f34d3ddc0970b74 before f80d3d98d2ff78d9e2fe5d68b1f45948c4f7bd24	CNA record
linux linux_kernel linux:linux_kernel	from 3.5 before 5.10.259; from 5.11 before 5.15.210; from 5.16 before 6.1.176; from 6.2 before 6.6.143; from 6.7 before 6.12.93; from 6.13 before 6.18.34; from 6.19 before 7.0.11; 7.1; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/4f6266735a0ba6a568b6d4c9fa51c33a5a7f2d70	patch
https://git.kernel.org/stable/c/53cb3511f6eda37d3bd923545fdba6013b6d7bb7	patch
https://git.kernel.org/stable/c/efb62458c94db1fe3a287e7e89c31b0cfb03f938	patch
https://git.kernel.org/stable/c/2a8c9e86529156c62d9187b9ed9454c31665ad33	patch
https://git.kernel.org/stable/c/0f3ebd7bb417aabc44853cc7c2a184ebb0e05b45	patch
https://git.kernel.org/stable/c/6921a7683ae9ad0208d829e71f725a9e25ccff49	patch
https://git.kernel.org/stable/c/555b8d3f5c313d81d46274fd0976352dafc80124	patch
https://git.kernel.org/stable/c/f80d3d98d2ff78d9e2fe5d68b1f45948c4f7bd24	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.