s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

CVE-2026-46231

📛 CVE Title

batman-adv: bla: put backbone reference on failed claim hash insert

⬇ Download JSON ⚠ View as Threat

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert When batadv_bla_add_claim() fails to insert a new claim into the hash, it leaked a reference to the backbone_gw for which the claim was intended. Call batadv_backbone_gw_put() on the error path to release the reference and avoid leaking the backbone_gw object.

Overview

State
PUBLISHED
Assigner (CNA)
Linux
CVSS severity
high
CVSS score
CVSS 7.1 / 10 7.1 7.1 / 10
CVSS vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Effective score
7.1 / 10 HIGH source: CNA overview
MSRC score
7.1 / 10 HIGH MS rating: Moderate
CWE(s)
—
Reserved
2026-05-13
Published
2026-05-28 09:40 UTC
Last updated
2026-06-01 16:20 UTC
Source
https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/46xxx/CVE-2026-46231.json
Linked Threat
CVE-2026-46231 — CVE-2026-46231

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

EPSS score
0.0012 (probability of exploitation in next 30 days)
EPSS percentile
2.10% vs all CVEs — higher = more likely to be exploited, as of 2026-07-01

NVD / KEV / EPSS data refreshed 2026-07-02 12:17 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID
EUVD-2026-32858
Assigner
Linux
Published
May 28, 2026, 9:40:53 AM
Updated
Jun 14, 2026, 6:04:27 PM
EUVD base score
0.0 / 10
EUVD-reported EPSS
0.1200
Vendors
Linux
Products
Linux (patch: 6.6.140)
Linux (patch: 7.1-rc4)
Linux (patch: 7.1)
Linux (3db0decf1185357d6ab2256d0dede1ca9efda03d <769f413d374ff2b6ff6d8d8c37b4c1178e6cdf14)
Linux (patch: 5.10.258)
Linux (3db0decf1185357d6ab2256d0dede1ca9efda03d <6c8b68a7ed667a63aa603ba4d3a7088be143007e)
Linux (3db0decf1185357d6ab2256d0dede1ca9efda03d <2888c9a154123db0254ae4fb9bea570c7e1f2e06)
Linux (3db0decf1185357d6ab2256d0dede1ca9efda03d <fd0ca034c1e71ca7613cde9dd892836b2c2831bd)
Linux (patch: 6.18.32)
Linux (3db0decf1185357d6ab2256d0dede1ca9efda03d <0baf4b659cdc7305cf685b5a5d60f9e3816ab5d0)
Linux (485eedfabc2aefac8f09f98a82ba1c1e3e202a6d)
Linux (patch: 6.12.90)
Linux (patch: 7.0.9)
Linux (3db0decf1185357d6ab2256d0dede1ca9efda03d <ba9d20ee9076dac32c371116bacbe72480eb356c)
Linux (3db0decf1185357d6ab2256d0dede1ca9efda03d <7cccf4eb4f96d3c3af91a00b7a9caa652439542e)
Linux (patch: 0)
Linux (3.16.39 <3.17)
Linux (3fdd337ac0b277a1f40aa73b35283520f426e517)
Linux (4.7)
Linux (4.4.217 <4.5)
Linux (patch: 5.15.209)
Linux (patch: 6.1.175)
Linux (3db0decf1185357d6ab2256d0dede1ca9efda03d <65419eb4259a26a3cd3f56fa0e3b3c113bf8c256)
Aliases
GHSA-3m8h-6hx2-2479

ENISA description: In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert When batadv_bla_add_claim() fails to insert a new claim into the hash, it leaked a reference to the backbone_gw for which the claim was intended. Call batadv_backbone_gw_put() on the error path to release the reference and avoid leaking the backbone_gw object.

EUVD references (8)

Microsoft Security Response Center MSRC

Microsoft's vendor-authoritative record from the Security Update Guide — its own CVSS score, impact, severity rating, exploit assessment, and KB-article fixes. Refreshed 2026-11-05 03:38 UTC (source: CVRF).

MS severity
Moderate
MS CVSS base score
7.1 / 10 (temporal 6.5)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U
Release
2026-May
Microsoft remediations / KB articles (2)

Affected products (2)
VendorProductVersionsPlatforms
Linux Linux 3db0decf1185357d6ab2256d0dede1ca9efda03d (affected), 3db0decf1185357d6ab2256d0dede1ca9efda03d (affected), 3db0decf1185357d6ab2256d0dede1ca9efda03d (affected), 3db0decf1185357d6ab2256d0dede1ca9efda03d (affected), 3db0decf1185357d6ab2256d0dede1ca9efda03d (affected), 3db0decf1185357d6ab2256d0dede1ca9efda03d (affected), 3db0decf1185357d6ab2256d0dede1ca9efda03d (affected), 3db0decf1185357d6ab2256d0dede1ca9efda03d (affected), 3fdd337ac0b277a1f40aa73b35283520f426e517 (affected), 485eedfabc2aefac8f09f98a82ba1c1e3e202a6d (affected), 3.16.39 (affected), 4.4.217 (affected) —
Linux Linux 4.7 (affected), 0 (unaffected), 5.10.258 (unaffected), 5.15.209 (unaffected), 6.1.175 (unaffected), 6.6.140 (unaffected), 6.12.90 (unaffected), 6.18.32 (unaffected), 7.0.9 (unaffected), 7.1-rc4 (unaffected) —

Vendor references (8)

References embedded in the original CVE record by the assigning CNA.

Web references (13)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

Remediations (20)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

  • THREAT ADVISORY RedSun Zero-Day (Windows Defender) April 17, 2026
    web:blackswan-cybersecurity.com

    Cloud Files API activity originating outside legitimate OneDrive/sync processes. Mitigation Steps: Apply all Windows updates immediately (monitor MSRC for an emergency RedSun-specific patch . None released as of April 17, 2026 ). Supplement Defender with a secondary EDR solution (e.g., Huntress) capable of detecting Defender bypasses.

    2026-06-03 23:59 UTC
  • Fragnesia (CVE-2026-46300) — Mitigation and Kernel Update on CloudLinux
    web:blog.cloudlinux.com

    Fragnesia is a new XFRM/ESP Linux kernel local privilege escalation in the Dirty Frag class. Apply the mitigation now. Patched kernels and KernelCare livepatches are coming shortly.

    2026-06-03 23:59 UTC
  • Microsoft and Adobe Patch Tuesday, May 2026 Security Update Review
    web:blog.qualys.com

    May 2026's Patch Tuesday arrives with Microsoft addressing a fresh set of vulnerabilities across its ecosystem, reinforcing the ongoing need for timely patching in an increasingly threat-heavy…

    2026-06-03 23:59 UTC
  • Microsoft Patch Tuesday May 2026 - 120 Vulnerabilities Fixed, Including ...
    web:cybersecuritynews.com

    Microsoft's May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote code execution (RCE) flaws rated Critical.

    2026-06-03 23:59 UTC
  • Security Update Guide - Microsoft
    web:msrc.microsoft.com

    The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

    2026-06-03 23:59 UTC
  • Nvd - Cve-2026-46231
    web:nvd.nist.gov

    Quick Info CVE Dictionary Entry: CVE-2026-46231 NVD Published Date:05/28/2026NVD Last Modified:06/01/ 2026 Source:kernel.org

    2026-06-03 23:59 UTC
  • Landing Page | ServiceNow Common Vulnerabilities & Exposures (CVE ...
    web:support.servicenow.com

    Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...

    2026-06-03 23:59 UTC
  • Oracle Critical Patch Update Advisory - April 2026
    web:www.oracle.com

    This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

    2026-06-03 23:59 UTC
  • Oracle Patches 450 Vulnerabilities With April 2026 CPU
    web:www.securityweek.com

    Oracle on Tuesday announced the release of 481 new security patches as part of its April 2026 Critical Patch Update (CPU). Across the 28 product families that received security updates, more than 300 patches address vulnerabilities that are remotely exploitable without authentication.

    2026-06-03 23:59 UTC
  • You are running this virtual machine with side channel mitigations enabled
    web:www.thewindowsclub.com

    If you want to know more about Side Channel Mitigation or disable it on VMware Workstation, Player, and Fusion, check out this post.

    2026-06-03 23:59 UTC
  • Microsoft Confirms Defender RoguePlanet 0-Day Exploit and Working to ...
    web:cybersecuritynews.com

    Microsoft has officially acknowledged a critical zero-day vulnerability in Microsoft Defender, publicly dubbed "RoguePlanet," and confirmed it is actively developing a security patch to address the flaw.

    2026-06-19 02:28 UTC
  • Security Update Guide - Loading - Microsoft
    web:portal.msrc.microsoft.com

    The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

    2026-06-19 02:28 UTC
  • June 9, 2026—KB5094126 (OS Builds 26200.8655 and 26100.8655)
    web:support.microsoft.com

    This cumulative update for Windows 11, version 25H2 and 24H2 (KB5094126) includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit the Windows release health dashboard for the latest status on this release.

    2026-06-19 02:28 UTC
  • 2 New Microsoft Defender Zero-Days Exploited—Patch Now Rolling Out
    web:tech.yahoo.com

    Microsoft has confirmed an emergency security update as CISA warns that two new Defender zero-days are being exploited by attackers.

    2026-06-19 02:28 UTC
  • Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited ...
    web:thehackernews.com

    Microsoft patches 59 vulnerabilities, including six actively exploited zero-days, with CISA mandating urgent federal remediation .

    2026-06-19 02:28 UTC
  • Microsoft is working on a patch for 'YellowKey ... - Computerworld
    web:www.computerworld.com

    Microsoft says it is considering a patch for a zero-day vulnerability, dubbed YellowKey, that allows attackers with access to a Windows device to bypass Bitlocker encryption protection and read ...

    2026-06-19 02:28 UTC
  • April 2026 Patch Tuesday: Updates and Analysis | CrowdStrike
    web:www.crowdstrike.com

    Microsoft's April 2026 Patch Tuesday addresses 164 CVEs , featuring 8 Critical vulnerabilities, one exploited zero-day, and one disclosed zero-day.

    2026-06-19 02:28 UTC
  • February 2026 Patch Tuesday: Updates and Analysis | CrowdStrike
    web:www.crowdstrike.com

    Microsoft's February 2026 Patch Tuesday addresses 59 CVEs , featuring six exploited vulnerabilities, three of which were publicly known, and five Critical vulnerabilities.

    2026-06-19 02:28 UTC
  • Microsoft working on a fix for RoguePlanet, a flaw that grants full PC ...
    web:www.malwarebytes.com

    Microsoft says it's working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.

    2026-06-19 02:28 UTC
  • Patch Tuesday June 2026: Security Updates & CVE Analysis
    web:zecurit.com

    Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

    2026-06-19 02:28 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-46231.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/batman-adv/bridge_loop_avoidance.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6c8b68a7ed667a63aa603ba4d3a7088be143007e",
              "status": "affected",
              "version": "3db0decf1185357d6ab2256d0dede1ca9efda03d",
              "versionType": "git"
            },
            {
              "lessThan": "769f413d374ff2b6ff6d8d8c37b4c1178e6cdf14",
              "status": "affected",
              "version": "3db0decf1185357d6ab2256d0dede1ca9efda03d",
              "versionType": "git"
            },
            {
              "lessThan": "2888c9a154123db0254ae4fb9bea570c7e1f2e06",
              "status": "affected",
              "version": "3db0decf1185357d6ab2256d0dede1ca9efda03d",
              "versionType": "git"
            },
            {
              "lessThan": "65419eb4259a26a3cd3f56fa0e3b3c113bf8c256",
              "status": "affected",
              "version": "3db0decf1185357d6ab2256d0dede1ca9efda03d",
              "versionType": "git"
            },
            {
              "lessThan": "fd0ca034c1e71ca7613cde9dd892836b2c2831bd",
              "status": "affected",
              "version": "3db0decf1185357d6ab2256d0dede1ca9efda03d",
              "versionType": "git"
            },
            {
              "lessThan": "0baf4b659cdc7305cf685b5a5d60f9e3816ab5d0",
              "status": "affected",
              "version": "3db0decf1185357d6ab2256d0dede1ca9efda03d",
              "versionType": "git"
            },
            {
              "lessThan": "7cccf4eb4f96d3c3af91a00b7a9caa652439542e",
              "status": "affected",
              "version": "3db0decf1185357d6ab2256d0dede1ca9efda03d",
              "versionType": "git"
            },
            {
              "lessThan": "ba9d20ee9076dac32c371116bacbe72480eb356c",
              "status": "affected",
              "version": "3db0decf1185357d6ab2256d0dede1ca9efda03d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3fdd337ac0b277a1f40aa73b35283520f426e517",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "485eedfabc2aefac8f09f98a82ba1c1e3e202a6d",
              "versionType": "git"
            },
            {
              "lessThan": "3.17",
              "status": "affected",
              "version": "3.16.39",
              "versionType": "semver"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.217",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/batman-adv/bridge_loop_avoidance.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.7"
            },
            {
              "lessThan": "4.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.32",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1-rc4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.90",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.32",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.9",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1-rc4",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.16.39",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.217",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: bla: put backbone reference on failed claim hash insert\n\nWhen batadv_bla_add_claim() fails to insert a new claim into the hash, it\nleaked a reference to the backbone_gw for which the claim was intended.\nCall batadv_backbone_gw_put() on the error path to release the reference\nand avoid leaking the backbone_gw object."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-01T16:20:25.202Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/6c8b68a7ed667a63aa603ba4d3a7088be143007e"
        },
        {
          "url": "https://git.kernel.org/stable/c/769f413d374ff2b6ff6d8d8c37b4c1178e6cdf14"
        },
        {
          "url": "https://git.kernel.org/stable/c/2888c9a154123db0254ae4fb9bea570c7e1f2e06"
        },
        {
          "url": "https://git.kernel.org/stable/c/65419eb4259a26a3cd3f56fa0e3b3c113bf8c256"
        },
        {
          "url": "https://git.kernel.org/stable/c/fd0ca034c1e71ca7613cde9dd892836b2c2831bd"
        },
        {
          "url": "https://git.kernel.org/stable/c/0baf4b659cdc7305cf685b5a5d60f9e3816ab5d0"
        },
        {
          "url": "https://git.kernel.org/stable/c/7cccf4eb4f96d3c3af91a00b7a9caa652439542e"
        },
        {
          "url": "https://git.kernel.org/stable/c/ba9d20ee9076dac32c371116bacbe72480eb356c"
        }
      ],
      "title": "batman-adv: bla: put backbone reference on failed claim hash insert",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46231",
    "datePublished": "2026-05-28T09:40:53.471Z",
    "dateReserved": "2026-05-13T15:03:33.106Z",
    "dateUpdated": "2026-06-01T16:20:25.202Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}