CVE-2026-43382

batman-adv: Avoid double-rtnl_lock ELP metric worker

published May 8, 2026

CVSS
—
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: Avoid double-rtnl_lock ELP metric worker

batadv_v_elp_get_throughput() might be called when the RTNL lock is already

held. This could be problematic when the work queue item is cancelled via

cancel_delayed_work_sync() in batadv_v_elp_iface_disable(). In this case,

an rtnl_lock() would cause a deadlock.

To avoid this, rtnl_trylock() was used in this function to skip the

retrieval of the ethtool information in case the RTNL lock was already

held.

But for cfg80211 interfaces, batadv_get_real_netdev() was called - which

also uses rtnl_lock(). The approach for __ethtool_get_link_ksettings() must

also be used instead and the lockless version __batadv_get_real_netdev()

has to be called.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Published
2026-05-08T14:21Z
EPSS history
Timeline
  • 08 MAY 14:21Z
    batman-adv: Avoid double-rtnl_lock ELP metric worker
    cvelistv5