CVE-2026-43382

ANALYSIS PENDING

batman-adv: Avoid double-rtnl_lock ELP metric worker

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnl_lock ELP metric worker batadv_v_elp_get_throughput() might be called when the RTNL lock is already held. This could be problematic when the work queue item is cancelled via cancel_delayed_work_sync() in batadv_v_elp_iface_disable(). In this case, an rtnl_lock() would cause a deadlock. To avoid this, rtnl_trylock() was used in this function to skip the retrieval of the ethtool information in case the RTNL lock was already held. But for cfg80211 interfaces, batadv_get_real_netdev() was called - which also uses rtnl_lock(). The approach for __ethtool_get_link_ksettings() must also be used instead and the lockless version __batadv_get_real_netdev() has to be called.

Scores

EPSS 0.0003
EPSS Percentile 9.6%

Details

Status published
Products (27)
Linux/Linux < 6.14
Linux/Linux 0fdc3c166ac17b26014313fa2b93696354511b24 - b7e5d8ddfdf1d6e9e0808d1adf7736a107372d77
Linux/Linux 1c334629176c2d644befc31a20d4bf75542f7631
Linux/Linux 3c0e0aecb78cb2a2ca1dc701982d08fedb088dc6 - 192f40ad8a7dac58dae9199a065dbf7e6e67b75b
Linux/Linux 5.10.235 - 5.10.253
Linux/Linux 5.10.253 - 5.10.*
Linux/Linux 5.15.179 - 5.15.203
Linux/Linux 5.15.203 - 5.15.*
Linux/Linux 5.4.291 - 5.5
Linux/Linux 6.1.129 - 6.1.167
... and 17 more
Published May 08, 2026
Tracked Since May 08, 2026