CVE-2026-64094

The CVE-2026-64094 entry concerns the Linux kernel's batman-adv component. A NULL-pointer dereference can occur when a hardif is retrieved as the primary interface of a meshif without holding rtnl_lock, and the mesh interface becomes decoupled; the meshif pointer from the primary hardif may be NU...

PT-2026-61411

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl lock held, a hardif might be retrieved as primary interface of a meshif, but then while operating on this interface getting decoupled from the mes...