CVE-2026-52931

In the Linux kernel, the batman-adv TP meter logic could access sender-only fields when tp_vars had the BATADV_TP_RECEIVER role, causing undefined behavior. Specifically, batadv_tp_recv_ack() and batadv_tp_stop() are only valid for BATADV_TP_SENDER; if invoked while in the receiver role (e.g., wh...