SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64096

HIGH · CVSS 8.8 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the batman-adv module, specifically in the handling of multicast entries, leading to a use-after-free condition. This flaw allows concurrent RCU readers to access freed memory, potentially resulting in system crashes or arbitrary code execution. Organizations using Linux systems with the batman-adv module should prioritize patching this vulnerability to mitigate the risk of exploitation.

CVE
CVE-2026-64096
Severity
HIGH
CVSS
8.8
EPSS
0.26%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orig_node RCU release batadv_mcast_purge_orig() removes entries from RCU-protected hlists but does not wait for an RCU grace period before returning. Concurrent RCU readers may still accesses references to those entries at the point of removal. RCU-protected readers trying to operate on entries like orig->mcast_want_all_ipv6_node will then access already freed memory. Fix this by moving batadv_mcast_purge_orig() to batadv_orig_node_release(), just before the call_rcu() invocation. This ensures RCU readers that were active at purge time have drained before the orig_node memory is reclaimed.

Related CVEs

Other vulnerabilities affecting the same vendor(s)