CVE-2026-52931

🎯 CVE-2026-52931 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-52931 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid use of uninit sender vars batadv_tp_recv_ack() and batadv_tp_stop() are only valid for tp_vars in the BATADV_TP_SENDER role. When called with a BATADV_TP_RECEIVER role, it proceeds to read sender-only members that were never initialized, leading to undefined behavior. This can be triggered when a node that is currently acting as a receiver in an ongoing tp_meter

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: tp_meter: avoid use of uninit sender vars

batadv_tp_recv_ack() and batadv_tp_stop() are only valid for tp_vars in the
BATADV_TP_SENDER role. When called with a BATADV_TP_RECEIVER role, it
proceeds to read sender-only members that were never initialized, leading
to undefined behavior.

This can be triggered when a node that is currently acting as a receiver in
an ongoing tp_meter session receives a malicious ACK packet.

Guard against this by checking tp_vars->role immediately after the
lookup and bailing out if it is not BATADV_TP_SENDER, before any of
those members are accessed.

Klassifikation & Betroffenheit:

CWE-457 Linux Linux 4.8Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e <1a21c055f66e78973712a4a1be2a554f1ee2e4f4Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e <0e388af04b3958b178a1b979527f93eb46ea1feeLinux patch: 7.1Linux patch: 5.10.258Linux patch: 6.1.175Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e <6c65cf23d4c6170fcf5714c32aa64689718cb142Linux 33a3bb4a3345bb511f9c69c913da95d4693e2a4e <9884c9c02d3c90e9215db3c5128f59045d20ae91

Use of Uninitialized Variable 🎯 High

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

🛡️ Empfohlene Mitigation: Ensure that critical variables are initialized before first use [REF-1485].

Vollständige Definition bei MITRE ➔

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-74705 10.0 CVE-2026-74612 10.0 CVE-2026-74475 10.0 CVE-2026-74309 10.0 CVE-2026-74280 10.0

🩹 Patch verfügbar (OSV):

🩹 Kernel ≥ 5.10.258 🩹 Kernel ≥ 5.15.209 🩹 Kernel ≥ 6.1.175 🩹 Kernel ≥ 6.6.142 🩹 Kernel ≥ 6.12.92 🩹 Kernel ≥ 6.18.34

🇩🇪 BSI-Sicherheitshinweise: BSI · hoch · Linux Kernel: Mehrere Schwachstellen ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 06/2026

Heute 22.10.

CVSS-Vektor-Analyse: 9.8

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA-Bewertung (Linux): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Veröffentlicht:24.06.2026

Aktualisiert:19.10.2026 20:18

Assigner (CNA):Linux

EUVD-ID:EUVD-2026-38701

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-457 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

Tier	CVEs	Anteil
≥90 %	725	0,2 %
≥50 %	3.224	0,9 %
≥10 %	22.086	5,9 %
<10 %	346.723	93,0 %

Tier

CVEs

Anteil

≥90 %

725

0,2 %

≥50 %

3.224

0,9 %

≥10 %

22.086

5,9 %

<10 %

346.723

93,0 %

Noch keine Analyse zu CVE-2026-52931

Beitrag zu CVE-2026-52931 verfassen

Zero-Day & Vulnerability Intelligence Hub