CVE-2026-52926 PUBLISHED

batman-adv: clear current gateway during teardown

Assigner: Linux
Reserved: 09.06.2026 Published: 24.06.2026 Updated: 24.06.2026

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: clear current gateway during teardown

batadv_gw_node_free() removes the gateway list entries during mesh teardown, but it does not clear the currently selected gateway. This leaves stale gateway state behind across cleanup and can break a later mesh recreation.

Clear bat_priv->gw.curr_gw before walking the gateway list so the selected gateway reference is dropped as part of teardown.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 2265c141086474bbae55a5bb3afa1ebb78ccaa7c to a3f3f1ec8aad84c5dd386c430b9c61cddd85b18f (excl.)
  • affected from 2265c141086474bbae55a5bb3afa1ebb78ccaa7c to e2ec4c712d19141ca7bf7fbbb1d842f73abaa186 (excl.)
  • affected from 2265c141086474bbae55a5bb3afa1ebb78ccaa7c to 9a1a8ed4facfe843bde6fdfcf7af0e9923eb2e17 (excl.)
  • affected from 2265c141086474bbae55a5bb3afa1ebb78ccaa7c to 6de089b545db013433cf934bb4e4433dec2dd65f (excl.)
  • affected from 2265c141086474bbae55a5bb3afa1ebb78ccaa7c to 30bda3ef4b0cac777f1a7c314cd08b8ff6437365 (excl.)
  • affected from 2265c141086474bbae55a5bb3afa1ebb78ccaa7c to ae7aeb0ce3c0ebbe357ed525779acac197a18086 (excl.)
  • affected from 2265c141086474bbae55a5bb3afa1ebb78ccaa7c to 17e3a441111cd1a530cd6ee69a22f3161d80d810 (excl.)
  • affected from 2265c141086474bbae55a5bb3afa1ebb78ccaa7c to a340a51ed801eab7bb454150c226323b865263cc (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 3.1 is affected
  • unaffected from 0 to 3.1 (excl.)
  • unaffected from 5.10.258 to 5.10.* (incl.)
  • unaffected from 5.15.209 to 5.15.* (incl.)
  • unaffected from 6.1.175 to 6.1.* (incl.)
  • unaffected from 6.6.142 to 6.6.* (incl.)
  • unaffected from 6.12.92 to 6.12.* (incl.)
  • unaffected from 6.18.34 to 6.18.* (incl.)
  • unaffected from 7.0.11 to 7.0.* (incl.)
  • unaffected from 7.1 to * (incl.)

References