https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 15:55:56 +0000 https://vulnerability.circl.lu/vuln/cve-2026-52931 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: tp_meter: avoid use of uninit sender vars</p> <p>batadv_tp_recv_ack() and batadv_tp_stop() are only valid for tp_vars in the BATADV_TP_SENDER role. When called with a BATADV_TP_RECEIVER role, it proceeds to read sender-only members that were never initialized, leading to undefined behavior.</p> <p>This can be triggered when a node that is currently acting as a receiver in an ongoing tp_meter session receives a malicious ACK packet.</p> <p>Guard against this by checking tp_vars-&gt;role immediately after the lookup and bailing out if it is not BATADV_TP_SENDER, before any of those members are accessed.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>batman-adv: tp_meter: avoid use of uninit sender vars</p> <p>batadv_tp_recv_ack() and batadv_tp_stop() are only valid for tp_vars in the BATADV_TP_SENDER role. When called with a BATADV_TP_RECEIVER role, it proceeds to read sender-only members that were never initialized, leading to undefined behavior.</p> <p>This can be triggered when a node that is currently acting as a receiver in an ongoing tp_meter session receives a malicious ACK packet.</p> <p>Guard against this by checking tp_vars-&gt;role immediately after the lookup and bailing out if it is not BATADV_TP_SENDER, before any of those members are accessed.</p> https://vulnerability.circl.lu/vuln/cve-2026-52931