Bug 2536658 (CVE-2026-93204) - CVE-2026-93204 kernel: batman-adv: dat: atomically update mac addresses
Summary: CVE-2026-93204 kernel: batman-adv: dat: atomically update mac addresses
Keywords:
Status: NEW
Alias: CVE-2026-93204
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-17 19:03 UTC by OSIDB Bzimport
Modified: 2026-10-13 14:48 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-17 19:03:07 UTC
In the Linux kernel, the following vulnerability has been resolved:

batman-adv: dat: atomically update mac addresses

When a MAC address is updated in batadv_dat_entry_add(), it is done using a
simple copy function. A parallel reader might only see parts of this
update. In worst case, the reader is transporting the half updated MAC
address over the network or is creating an ARP response using it -
poisoning the ARP cache.

atomic64_t can be used to store the 48 bit of a mac address. A reader will
then either see the old mac address or the new one - never a mixture of
both.


Note You need to log in before you can comment on or make changes to this bug.