CVE-2026-52926 Linux CVE debrief

Who should care

Users of Linux kernel batman-adv functionality should verify and apply patches to prevent potential issues with gateway state during mesh teardown. This includes operators managing Linux kernel-based systems that utilize batman-adv for mesh networking. Security teams and vulnerability management teams should also review the issue to ensure proper mitigation and monitoring.

Technical summary

The Linux kernel batman-adv component had a vulnerability where the current gateway was not properly cleared during mesh teardown. This could lead to stale gateway state being left behind, potentially causing issues if the mesh is recreated later. The issue has been addressed by clearing the current gateway before walking the gateway list during teardown. The fix ensures that the batman-adv component properly cleans up gateway state during mesh teardown, preventing potential problems.

Defensive priority

Apply patches to ensure proper cleanup of batman-adv gateway state during mesh teardown. Review system configurations for batman-adv and monitor for potential issues.

Recommended defensive actions

• Verify and apply Linux kernel patches for batman-adv
• Review Linux kernel configurations for batman-adv
• Monitor Linux kernel updates for batman-adv
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-06-24T08:16:22.697Z and last modified on 2026-07-07T18:35:34.340Z. Multiple source references from the Linux kernel Git repository were provided. The Linux kernel batman-adv component had a vulnerability where the current gateway was not properly cleared during mesh teardown. Evidence limits suggest that defenders verify patch application and review system configurations for batman-adv. No additional information is available on known or unknown affected scope.

Official resources