GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-46208 (GCVE-0-2026-46208)

Vulnerability from cvelistv5 – Published: 2026-05-28 09:40 – Updated: 2026-08-05 12:30
VLAI
Title
batman-adv: stop tp_meter sessions during mesh teardown
Summary
In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop tp_meter sessions during mesh teardown TP meter sessions remain linked on bat_priv->tp_list after the netlink request has already finished. When the mesh interface is removed, batadv_mesh_free() currently tears down the mesh without first draining these sessions. A running sender thread or a late incoming tp_meter packet can then keep processing against a mesh instance which is already shutting down. Synchronize tp_meter with the mesh lifetime by stopping all active sessions from batadv_mesh_free() and waiting for sender threads to exit before teardown continues.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 5e7d0ac936354c36810e74ac3056b334ed1f4058 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 268078acae72daa12b17b2b299701cb9924e469a (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 58943b7ea356294749dae3e75b96c0ee292c00be (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 79bc0eaeef2c5797317bf2da8e3159a74d62ec47 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 26dfeee8db81354bfdade155f27f9e16510ad196 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 03660dab86f93319178a24667f6998526dc4355d (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 8634c1dbd73adb74d40533ebb7e914efb82e71fb (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 3d3cf6a7314aca4df0a6dde28ce784a2a30d0166 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.8
Unaffected: 0 , < 4.8 (semver)
Unaffected: 5.10.259 , ≤ 5.10.* (semver)
Unaffected: 5.15.210 , ≤ 5.15.* (semver)
Unaffected: 6.1.176 , ≤ 6.1.* (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.90 , ≤ 6.12.* (semver)
Unaffected: 6.18.32 , ≤ 6.18.* (semver)
Unaffected: 7.0.9 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/batman-adv/main.c",
            "net/batman-adv/tp_meter.c",
            "net/batman-adv/tp_meter.h",
            "net/batman-adv/types.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5e7d0ac936354c36810e74ac3056b334ed1f4058",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "268078acae72daa12b17b2b299701cb9924e469a",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "58943b7ea356294749dae3e75b96c0ee292c00be",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "79bc0eaeef2c5797317bf2da8e3159a74d62ec47",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "26dfeee8db81354bfdade155f27f9e16510ad196",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "03660dab86f93319178a24667f6998526dc4355d",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "8634c1dbd73adb74d40533ebb7e914efb82e71fb",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "3d3cf6a7314aca4df0a6dde28ce784a2a30d0166",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/batman-adv/main.c",
            "net/batman-adv/tp_meter.c",
            "net/batman-adv/tp_meter.h",
            "net/batman-adv/types.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.210",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.32",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.259",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.210",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.90",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.32",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.9",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: stop tp_meter sessions during mesh teardown\n\nTP meter sessions remain linked on bat_priv-\u003etp_list after the netlink\nrequest has already finished. When the mesh interface is removed,\nbatadv_mesh_free() currently tears down the mesh without first draining\nthese sessions.\n\nA running sender thread or a late incoming tp_meter packet can then keep\nprocessing against a mesh instance which is already shutting down.\nSynchronize tp_meter with the mesh lifetime by stopping all active\nsessions from batadv_mesh_free() and waiting for sender threads to exit\nbefore teardown continues."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The controllable trigger is the local `BATADV_CMD_TP_METER` netlink command plus local interface teardown (rtnetlink); the \"late packet\" receiver path is not remotely controllable since the remote peer cannot drive the victim\u0027s teardown timing.\nAC:L - The attacker controls both sides of the race\u2014starting a session with an attacker-chosen `test_length` (default 10s) keeps the sender thread/receiver timer alive, then removing the interface triggers the free\u2014giving a large, reliably winnable window.\nPR:L - The tp_meter netlink op is `GENL_UNS_ADMIN_PERM`, i.e. CAP_NET_ADMIN checked against the netns owner\u0027s user namespace, which an unprivileged user obtains via `unshare -Urn`.\nUI:N - Both the session start and the mesh teardown are performed by the attacker; no victim interaction is required.\nS:U - The corruption stays within the kernel\u0027s own memory/security authority with no crossing of a VM, IOMMU, or sandbox boundary.\nC:H - Use-after-free on the netdev private data lets the attacker control freed-object contents and read adjacent/reallocated kernel memory.\nI:H - The freed `bat_priv` object can be reclaimed via heap spraying, yielding a write/control-flow-hijack primitive from the still-running sender thread and receiver timer.\nA:H - The use-after-free reliably causes a kernel oops/panic when the stale `bat_priv` and mesh tables are dereferenced after `free_netdev()`."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:30:29.443Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5e7d0ac936354c36810e74ac3056b334ed1f4058"
        },
        {
          "url": "https://git.kernel.org/stable/c/268078acae72daa12b17b2b299701cb9924e469a"
        },
        {
          "url": "https://git.kernel.org/stable/c/58943b7ea356294749dae3e75b96c0ee292c00be"
        },
        {
          "url": "https://git.kernel.org/stable/c/79bc0eaeef2c5797317bf2da8e3159a74d62ec47"
        },
        {
          "url": "https://git.kernel.org/stable/c/26dfeee8db81354bfdade155f27f9e16510ad196"
        },
        {
          "url": "https://git.kernel.org/stable/c/03660dab86f93319178a24667f6998526dc4355d"
        },
        {
          "url": "https://git.kernel.org/stable/c/8634c1dbd73adb74d40533ebb7e914efb82e71fb"
        },
        {
          "url": "https://git.kernel.org/stable/c/3d3cf6a7314aca4df0a6dde28ce784a2a30d0166"
        }
      ],
      "title": "batman-adv: stop tp_meter sessions during mesh teardown",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46208",
    "datePublished": "2026-05-28T09:40:26.341Z",
    "dateReserved": "2026-05-13T15:03:33.105Z",
    "dateUpdated": "2026-08-05T12:30:29.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46208",
      "date": "2026-09-16",
      "epss": "0.00139",
      "percentile": "0.03618"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:40:59.000Z",
      "cve": "CVE-2026-46208",
      "id": "msrc_CVE-2026-46208",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "batman-adv: stop tp_meter sessions during mesh teardown",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46208.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-46208\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-28T10:16:36.457\",\"lastModified\":\"2026-06-19T13:16:35.580\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbatman-adv: stop tp_meter sessions during mesh teardown\\n\\nTP meter sessions remain linked on bat_priv-\u003etp_list after the netlink\\nrequest has already finished. When the mesh interface is removed,\\nbatadv_mesh_free() currently tears down the mesh without first draining\\nthese sessions.\\n\\nA running sender thread or a late incoming tp_meter packet can then keep\\nprocessing against a mesh instance which is already shutting down.\\nSynchronize tp_meter with the mesh lifetime by stopping all active\\nsessions from batadv_mesh_free() and waiting for sender threads to exit\\nbefore teardown continues.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/batman-adv/main.c\",\"net/batman-adv/tp_meter.c\",\"net/batman-adv/tp_meter.h\",\"net/batman-adv/types.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"5e7d0ac936354c36810e74ac3056b334ed1f4058\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"268078acae72daa12b17b2b299701cb9924e469a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"58943b7ea356294749dae3e75b96c0ee292c00be\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"79bc0eaeef2c5797317bf2da8e3159a74d62ec47\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"26dfeee8db81354bfdade155f27f9e16510ad196\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"03660dab86f93319178a24667f6998526dc4355d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"8634c1dbd73adb74d40533ebb7e914efb82e71fb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"3d3cf6a7314aca4df0a6dde28ce784a2a30d0166\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/batman-adv/main.c\",\"net/batman-adv/tp_meter.c\",\"net/batman-adv/tp_meter.h\",\"net/batman-adv/types.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.259\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.210\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.176\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.140\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.90\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.32\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.9\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.8\",\"versionEndExcluding\":\"6.6.140\",\"matchCriteriaId\":\"8A43D2A6-1BA2-4D24-92BF-860A1BD48E27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.90\",\"matchCriteriaId\":\"3BAAA2BE-6EEC-45D5-AD66-50F63CA20483\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.32\",\"matchCriteriaId\":\"CB9F1FA8-6D5E-42B1-9877-57BACFE5C886\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.9\",\"matchCriteriaId\":\"33ACA10B-B260-46EA-BD50-70EBE5097672\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1EF7059-E670-45F4-B422-54C40FA86390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D38F0BF-A728-4133-A358-D44A2F7EE6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC732D08-5F7B-46D9-B154-E60C7F4F0A97\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/03660dab86f93319178a24667f6998526dc4355d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/268078acae72daa12b17b2b299701cb9924e469a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/26dfeee8db81354bfdade155f27f9e16510ad196\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3d3cf6a7314aca4df0a6dde28ce784a2a30d0166\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/58943b7ea356294749dae3e75b96c0ee292c00be\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/5e7d0ac936354c36810e74ac3056b334ed1f4058\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/79bc0eaeef2c5797317bf2da8e3159a74d62ec47\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8634c1dbd73adb74d40533ebb7e914efb82e71fb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T07:41:32+00:00",
      "cve": "CVE-2026-46208",
      "id": "CVE-2026-46208",
      "initial_release_date": "2026-05-28T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: batman-adv: stop tp_meter sessions during mesh teardown",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46208.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:11:06Z",
      "cve": "CVE-2026-46208",
      "id": "CVE-2026-46208",
      "initial_release_date": "2026-05-29T01:15:07Z",
      "product_status:known_affected": "381",
      "product_status:known_not_affected": "6",
      "product_status:recommended": "4",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46208",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46208.json",
      "version": "6"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.