CVE-2026-43382 Details
Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnl_lock ELP metric worker batadv_v_elp_get_throughput() might be called when the RTNL lock is already held. This could be problematic when the work queue item is cancelled via cancel_delayed_work_sync() in batadv_v_elp_iface_disable(). In this case, an rtnl_lock() would cause a deadlock. To avoid this, rtnl_trylock() was used in this function to skip the retrieval of the ethtool information in case the RTNL lock was already held. But for cfg80211 interfaces, batadv_get_real_netdev() was called - which also uses rtnl_lock(). The approach for __ethtool_get_link_ksettings() must also be used instead and the lockless version __batadv_get_real_netdev() has to be called.
A vulnerability in the Linux kernel's batman-adv module can lead to a deadlock situation. The issue arises in the ELP metric worker function, which may be called while the RTNL lock is already held. This can create problems when the work queue item is canceled, as the standard cancellation process would cause a delay, potentially leading to a deadlock. The vulnerability affects several versions of the Linux kernel.
The vulnerability has been addressed by modifying the ELP metric worker function to use a non-blocking attempt to acquire the RTNL lock. This change prevents the deadlock by allowing the function to skip the ethtool information retrieval if the lock is already held.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/192f40ad8a7dac58dae9199a065dbf7e6e67b75b | kernel.org | Patch |
| https://git.kernel.org/stable/c/2ab9f2531d37775cd79228c1f5d80e6bd08d11d3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4c3ae249431b4fcb315d7dfb4c3a13f9e443fd9b | kernel.org | Patch |
| https://git.kernel.org/stable/c/77808fe7d03ad0062840b95f431869a8b3d88b24 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b7e5d8ddfdf1d6e9e0808d1adf7736a107372d77 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cfc83a3c71517b59c1047db57da31e26a9dc2f33 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f3ca45673dab0514a887231de6f3243a699d5bfd | kernel.org | Patch |
| https://git.kernel.org/stable/c/fa7b4edfbabdf9235b0ab4bea297fc12b3bec9ca | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-667 | Improper Locking | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.4.291, < 5.5 >= 5.10.235, < 5.10.253 >= 5.15.179, < 5.15.203 >= 6.1.129, < 6.1.167 >= 6.6.79, < 6.6.130 >= 6.12.16, < 6.12.78 >= 6.13.4, < 6.14 >= 6.14.1, < 6.18.19 >= 6.19, < 6.19.9 6.14 - 6.14 rc3 6.14 rc4 6.14 rc5 6.14 rc6 6.14 rc7 7.0 rc1 7.0 rc2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 26, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |