CVE-2026-43382 - Vulnerability Details

- batman-adv: Avoid double-rtnl_lock ELP metric worker

Description

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: Avoid double-rtnl_lock ELP metric worker

batadv_v_elp_get_throughput() might be called when the RTNL lock is already
held. This could be problematic when the work queue item is cancelled via
cancel_delayed_work_sync() in batadv_v_elp_iface_disable(). In this case,
an rtnl_lock() would cause a deadlock.

To avoid this, rtnl_trylock() was used in this function to skip the
retrieval of the ethtool information in case the RTNL lock was already
held.

But for cfg80211 interfaces, batadv_get_real_netdev() was called - which
also uses rtnl_lock(). The approach for __ethtool_get_link_ksettings() must
also be used instead and the lockless version __batadv_get_real_netdev()
has to be called.

Published: 2026-05-08

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`a0019971f340ae02ba54cf1861f72da7e03e6b66`	affected	< 4c3ae249431b4fcb315d7dfb4c3a13f9e443fd9b
`3c0e0aecb78cb2a2ca1dc701982d08fedb088dc6`	affected	< 192f40ad8a7dac58dae9199a065dbf7e6e67b75b
`781a06fd265a8151f7601122d9c2e985663828ff`	affected	< fa7b4edfbabdf9235b0ab4bea297fc12b3bec9ca
`a7aa2317285806640c844acd4cd2cd768e395264`	affected	< f3ca45673dab0514a887231de6f3243a699d5bfd
`0fdc3c166ac17b26014313fa2b93696354511b24`	affected	< b7e5d8ddfdf1d6e9e0808d1adf7736a107372d77
`8c8ecc98f5c65947b0070a24bac11e12e47cc65d`	affected	< 2ab9f2531d37775cd79228c1f5d80e6bd08d11d3
`8c8ecc98f5c65947b0070a24bac11e12e47cc65d`	affected	< 77808fe7d03ad0062840b95f431869a8b3d88b24
`8c8ecc98f5c65947b0070a24bac11e12e47cc65d`	affected	< cfc83a3c71517b59c1047db57da31e26a9dc2f33
`1c334629176c2d644befc31a20d4bf75542f7631`	affected	—
`af264c2a9adc37f4bdf88ca7f3affa15d8c7de9e`	affected	—

Linux

affected

Version	Status	Constraints
`6.14`	affected	—
`0`	unaffected	< 6.14
`5.10.253`	unaffected	≤ 5.10.*
`5.15.203`	unaffected	≤ 5.15.*
`6.1.167`	unaffected	≤ 6.1.*
`6.6.130`	unaffected	≤ 6.6.*
`6.12.78`	unaffected	≤ 6.12.*
`6.18.19`	unaffected	≤ 6.18.*
`6.19.9`	unaffected	≤ 6.19.*
`7.0`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[a0019971f340ae02ba54cf1861f72da7e03e6b66,4c3ae249431b4fcb315d7dfb4c3a13f9e443fd9b)`	affected	code_commit	—
`[3c0e0aecb78cb2a2ca1dc701982d08fedb088dc6,192f40ad8a7dac58dae9199a065dbf7e6e67b75b)`	affected	code_commit	—
`[781a06fd265a8151f7601122d9c2e985663828ff,fa7b4edfbabdf9235b0ab4bea297fc12b3bec9ca)`	affected	code_commit	—
`[a7aa2317285806640c844acd4cd2cd768e395264,f3ca45673dab0514a887231de6f3243a699d5bfd)`	affected	code_commit	—
`[0fdc3c166ac17b26014313fa2b93696354511b24,b7e5d8ddfdf1d6e9e0808d1adf7736a107372d77)`	affected	code_commit	—
`[8c8ecc98f5c65947b0070a24bac11e12e47cc65d,2ab9f2531d37775cd79228c1f5d80e6bd08d11d3)`	affected	code_commit	—
`[8c8ecc98f5c65947b0070a24bac11e12e47cc65d,77808fe7d03ad0062840b95f431869a8b3d88b24)`	affected	code_commit	—
`[8c8ecc98f5c65947b0070a24bac11e12e47cc65d,cfc83a3c71517b59c1047db57da31e26a9dc2f33)`	affected	code_commit	—
`1c334629176c2d644befc31a20d4bf75542f7631`	affected	code_commit	—
`af264c2a9adc37f4bdf88ca7f3affa15d8c7de9e`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`6.14`	affected	semver	—
`[0,6.14)`	unaffected	semver	—
`[5.10.253,5.11.0)`	unaffected	semver	—
`[5.15.203,5.16.0)`	unaffected	semver	—
`[6.1.167,6.2.0)`	unaffected	semver	—
`[6.6.130,6.7.0)`	unaffected	semver	—
`[6.12.78,6.13.0)`	unaffected	semver	—
`[6.18.19,6.19.0)`	unaffected	semver	—
`[6.19.9,6.20.0)`	unaffected	semver	—
`[7.0,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00032.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/192f40ad8a7dac58dae9199a065dbf7e6e67b75b
https://git.kernel.org/stable/c/2ab9f2531d37775cd79228c1f5d80e6bd08d11d3
https://git.kernel.org/stable/c/4c3ae249431b4fcb315d7dfb4c3a13f9e443fd9b
https://git.kernel.org/stable/c/77808fe7d03ad0062840b95f431869a8b3d88b24
https://git.kernel.org/stable/c/b7e5d8ddfdf1d6e9e0808d1adf7736a107372d77
https://git.kernel.org/stable/c/cfc83a3c71517b59c1047db57da31e26a9dc2f33
https://git.kernel.org/stable/c/f3ca45673dab0514a887231de6f3243a699d5bfd
https://git.kernel.org/stable/c/fa7b4edfbabdf9235b0ab4bea297fc12b3bec9ca
https://lore.kernel.org/linux-cve-announce/2026050833-CVE-2026-43382-d102@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-43382
https://www.cve.org/CVERecord?id=CVE-2026-43382

History

Sat, 09 May 2026 03:15:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-367

Sat, 09 May 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-833
References		https://lore.kernel.org/linux-cve-announce/2026050833-CVE-2026-43382-d102@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-43382 https://www.cve.org/CVERecord?id=CVE-2026-43382

Fri, 08 May 2026 16:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-367

Fri, 08 May 2026 14:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnl_lock ELP metric worker batadv_v_elp_get_throughput() might be called when the RTNL lock is already held. This could be problematic when the work queue item is cancelled via cancel_delayed_work_sync() in batadv_v_elp_iface_disable(). In this case, an rtnl_lock() would cause a deadlock. To avoid this, rtnl_trylock() was used in this function to skip the retrieval of the ethtool information in case the RTNL lock was already held. But for cfg80211 interfaces, batadv_get_real_netdev() was called - which also uses rtnl_lock(). The approach for __ethtool_get_link_ksettings() must also be used instead and the lockless version __batadv_get_real_netdev() has to be called.
Title		batman-adv: Avoid double-rtnl_lock ELP metric worker
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/192f40ad8a7dac58dae9199a065dbf7e6e67b75b https://git.kernel.org/stable/c/2ab9f2531d37775cd79228c1f5d80e6bd08d11d3 https://git.kernel.org/stable/c/4c3ae249431b4fcb315d7dfb4c3a13f9e443fd9b https://git.kernel.org/stable/c/77808fe7d03ad0062840b95f431869a8b3d88b24 https://git.kernel.org/stable/c/b7e5d8ddfdf1d6e9e0808d1adf7736a107372d77 https://git.kernel.org/stable/c/cfc83a3c71517b59c1047db57da31e26a9dc2f33 https://git.kernel.org/stable/c/f3ca45673dab0514a887231de6f3243a699d5bfd https://git.kernel.org/stable/c/fa7b4edfbabdf9235b0ab4bea297fc12b3bec9ca

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-05-08T14:21:30.062Z

Updated: 2026-05-11T22:23:30.493Z

Reserved: 2026-05-01T14:12:56.006Z

Link: CVE-2026-43382

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-05-08T15:16:49.463

Modified: 2026-05-12T14:10:27.343

Link: CVE-2026-43382

Redhat

Severity :

Publid Date: 2026-05-08T00:00:00Z

Links: CVE-2026-43382 - Bugzilla

OpenCVE Enrichment

Updated: 2026-05-09T05:00:10Z

Weaknesses

CWE-833

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object