CVE-2026-64094

CVE-2026-64094 affects the Linux kernel’s batman-adv component. A NULL-pointer dereference can occur in the Bridge Loop Avoidance path when an ARP request is sent after a network interface is removed while a mesh interface’s primary hard interface is being processed. Specifically, if the mesh_ifa...