CVE-2026-43382
Description
A flaw was found in the batman-adv module of the Linux kernel. This vulnerability occurs when the batadv_v_elp_get_throughput() function attempts to acquire a network lock (RTNL lock) that is already held, particularly during the cancellation of a work queue item. This can lead to a deadlock, causing a Denial of Service (DoS) for the affected system.
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Resource Consumption (CPU); DoS: Resource Consumption (Other); DoS: Crash, Exit, or Restart
Each thread of execution will "hang" and prevent tasks from completing. In some cases, CPU consumption may occur if a lock check occurs in a tight loop.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
