GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-46206 (GCVE-0-2026-46206)

Vulnerability from cvelistv5 – Published: 2026-05-28 09:40 – Updated: 2026-08-05 12:30
VLAI
Title
batman-adv: reject new tp_meter sessions during teardown
Summary
In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject new tp_meter sessions during teardown Prevent tp_meter from starting new sender or receiver sessions after mesh_state has left BATADV_MESH_ACTIVE.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 0a7a840074c9ca5ebffc9c52358c8ea55828ec71 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < dcff44644bb518598b1a6be722706d6174b2f6a1 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 52e6ec3e972cf27792cc1559874dbee19f286869 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < e4a3c4a4c8f6efd243c3e448c05b7bebcbf7b3b6 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < ff93f86ecbb50a4709c403fc279a396e308edde5 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < e1e2194cc725ec1d41f9412496212f0fa0519c36 (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < ca39545cf07c142b39d474a1439a046bf28def3d (git)
Affected: 33a3bb4a3345bb511f9c69c913da95d4693e2a4e , < 3243543592425beec83d453793e9d27caa0d8e66 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.8
Unaffected: 0 , < 4.8 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.90 , ≤ 6.12.* (semver)
Unaffected: 6.18.32 , ≤ 6.18.* (semver)
Unaffected: 7.0.9 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/batman-adv/tp_meter.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0a7a840074c9ca5ebffc9c52358c8ea55828ec71",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "dcff44644bb518598b1a6be722706d6174b2f6a1",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "52e6ec3e972cf27792cc1559874dbee19f286869",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "e4a3c4a4c8f6efd243c3e448c05b7bebcbf7b3b6",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "ff93f86ecbb50a4709c403fc279a396e308edde5",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "e1e2194cc725ec1d41f9412496212f0fa0519c36",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "ca39545cf07c142b39d474a1439a046bf28def3d",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            },
            {
              "lessThan": "3243543592425beec83d453793e9d27caa0d8e66",
              "status": "affected",
              "version": "33a3bb4a3345bb511f9c69c913da95d4693e2a4e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/batman-adv/tp_meter.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.32",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.90",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.32",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.9",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: reject new tp_meter sessions during teardown\n\nPrevent tp_meter from starting new sender or receiver sessions after\nmesh_state has left BATADV_MESH_ACTIVE."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is reached via the netlink BATADV_CMD_TP_METER command (local genl socket) or via mesh packets injected into a locally-set-up batadv interface; batman-adv is an L2 mesh protocol, not internet-routable, so this requires local access rather than Network.\nAC:L - This is a teardown race, but a local attacker controls both sides \u2014 repeatedly creating/destroying the soft interface (driving mesh_free/batadv_tp_stop_all) in one thread while starting tp_meter sessions in another \u2014 and can retry the loop indefinitely until the window is won.\nPR:L - TP_METER is gated by GENL_UNS_ADMIN_PERM (namespaced CAP_NET_ADMIN), which an unprivileged user obtains via `unshare -Urn`, then creates their own batadv mesh interface; no real root is required.\nUI:N - The attacker drives both the session start and the interface teardown themselves; no action by any other user is needed.\nS:U - The use-after-free corrupts kernel heap objects within the kernel\u0027s own security authority; there is no crossing of a VM/IOMMU/sandbox boundary.\nC:H - The surviving session holds a dangling pointer to freed tp_vars/bat_priv memory; reclaiming and reading that freed object enables disclosure of kernel memory contents.\nI:H - The use-after-free permits heap spraying of the freed object and a controlled write through the stale timer/kthread/work references, enabling memory corruption and potential control-flow hijack.\nA:H - A timer/kthread/delayed work operating on freed mesh structures reliably triggers an oops/panic, crashing the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:30:28.363Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0a7a840074c9ca5ebffc9c52358c8ea55828ec71"
        },
        {
          "url": "https://git.kernel.org/stable/c/dcff44644bb518598b1a6be722706d6174b2f6a1"
        },
        {
          "url": "https://git.kernel.org/stable/c/52e6ec3e972cf27792cc1559874dbee19f286869"
        },
        {
          "url": "https://git.kernel.org/stable/c/e4a3c4a4c8f6efd243c3e448c05b7bebcbf7b3b6"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff93f86ecbb50a4709c403fc279a396e308edde5"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1e2194cc725ec1d41f9412496212f0fa0519c36"
        },
        {
          "url": "https://git.kernel.org/stable/c/ca39545cf07c142b39d474a1439a046bf28def3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/3243543592425beec83d453793e9d27caa0d8e66"
        }
      ],
      "title": "batman-adv: reject new tp_meter sessions during teardown",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46206",
    "datePublished": "2026-05-28T09:40:23.993Z",
    "dateReserved": "2026-05-13T15:03:33.105Z",
    "dateUpdated": "2026-08-05T12:30:28.363Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46206",
      "date": "2026-09-16",
      "epss": "0.00139",
      "percentile": "0.03616"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:43:45.000Z",
      "cve": "CVE-2026-46206",
      "id": "msrc_CVE-2026-46206",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "batman-adv: reject new tp_meter sessions during teardown",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46206.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-46206\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-28T10:16:36.243\",\"lastModified\":\"2026-06-17T10:53:16.530\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbatman-adv: reject new tp_meter sessions during teardown\\n\\nPrevent tp_meter from starting new sender or receiver sessions after\\nmesh_state has left BATADV_MESH_ACTIVE.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/batman-adv/tp_meter.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"0a7a840074c9ca5ebffc9c52358c8ea55828ec71\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"dcff44644bb518598b1a6be722706d6174b2f6a1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"52e6ec3e972cf27792cc1559874dbee19f286869\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"e4a3c4a4c8f6efd243c3e448c05b7bebcbf7b3b6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"ff93f86ecbb50a4709c403fc279a396e308edde5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"e1e2194cc725ec1d41f9412496212f0fa0519c36\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"ca39545cf07c142b39d474a1439a046bf28def3d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33a3bb4a3345bb511f9c69c913da95d4693e2a4e\",\"lessThan\":\"3243543592425beec83d453793e9d27caa0d8e66\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/batman-adv/tp_meter.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.140\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.90\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.32\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.9\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.8\",\"versionEndExcluding\":\"5.10.258\",\"matchCriteriaId\":\"1CA35684-7A23-48C2-8A06-2BD61F906C76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"919C10A9-7951-4A74-BADD-C135A0A8D8B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"92385813-D91D-480D-83A1-F423D2CBB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.140\",\"matchCriteriaId\":\"A1A92866-F406-43B5-B2D1-CFC274753E9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.90\",\"matchCriteriaId\":\"3BAAA2BE-6EEC-45D5-AD66-50F63CA20483\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.32\",\"matchCriteriaId\":\"CB9F1FA8-6D5E-42B1-9877-57BACFE5C886\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.9\",\"matchCriteriaId\":\"33ACA10B-B260-46EA-BD50-70EBE5097672\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1EF7059-E670-45F4-B422-54C40FA86390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D38F0BF-A728-4133-A358-D44A2F7EE6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC732D08-5F7B-46D9-B154-E60C7F4F0A97\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0a7a840074c9ca5ebffc9c52358c8ea55828ec71\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3243543592425beec83d453793e9d27caa0d8e66\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/52e6ec3e972cf27792cc1559874dbee19f286869\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ca39545cf07c142b39d474a1439a046bf28def3d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dcff44644bb518598b1a6be722706d6174b2f6a1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e1e2194cc725ec1d41f9412496212f0fa0519c36\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e4a3c4a4c8f6efd243c3e448c05b7bebcbf7b3b6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ff93f86ecbb50a4709c403fc279a396e308edde5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T07:41:34+00:00",
      "cve": "CVE-2026-46206",
      "id": "CVE-2026-46206",
      "initial_release_date": "2026-05-28T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: batman-adv: reject new tp_meter sessions during teardown",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46206.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:11:09Z",
      "cve": "CVE-2026-46206",
      "id": "CVE-2026-46206",
      "initial_release_date": "2026-05-29T01:15:09Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "697",
      "product_status:known_not_affected": "23",
      "product_status:recommended": "254",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46206",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46206.json",
      "version": "11"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.