CVE-2026-93204
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadv_dat_entry_add(), it is done using a simple copy function. A parallel reader might only see parts of this update. In worst case, the reader is transporting the half updated MAC address over the network or is creating an ARP response using it - poisoning the ARP cache. atomic64_t can be used to store the 48 bit of a mac address. A reader will then either see the old mac address or the new one - never a mixture of both.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-09-17 17:18:16.773000
Last modified
2026-10-19 10:17:11.140000
View original CVE JSON
{
"id": "CVE-2026-93204",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-09-17T17:18:16.773",
"lastModified": "2026-10-19T10:17:11.140",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: dat: atomically update mac addresses\n\nWhen a MAC address is updated in batadv_dat_entry_add(), it is done using a\nsimple copy function. A parallel reader might only see parts of this\nupdate. In worst case, the reader is transporting the half updated MAC\naddress over the network or is creating an ARP response using it -\npoisoning the ARP cache.\n\natomic64_t can be used to store the 48 bit of a mac address. A reader will\nthen either see the old mac address or the new one - never a mixture of\nboth."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"net/batman-adv/distributed-arp-table.c",
"net/batman-adv/types.h"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "2f1dfbe185075a50dc8f0490a136377af53a1c62",
"lessThan": "181012b3d29c51197c235ee5871fc7512c736855",
"versionType": "git",
"status": "affected"
},
{
"version": "2f1dfbe185075a50dc8f0490a136377af53a1c62",
"lessThan": "159360a0de831845c4500b4f8638decdcd624040",
"versionType": "git",
"status": "affected"
},
{
"version": "2f1dfbe185075a50dc8f0490a136377af53a1c62",
"lessThan": "259db2c04586d40b82c5c3002b1e28b0698a0bb7",
"versionType": "git",
"status": "affected"
},
{
"version": "2f1dfbe185075a50dc8f0490a136377af53a1c62",
"lessThan": "1674855a5b6eacfe35f4db3095d7055c25467274",
"versionType": "git",
"status": "affected"
},
{
"version": "2f1dfbe185075a50dc8f0490a136377af53a1c62",
"lessThan": "66238e2a74eca5dabf85b0cd2c3c944e474dc2fd",
"versionType": "git",
"status": "affected"
},
{
"version": "2f1dfbe185075a50dc8f0490a136377af53a1c62",
"lessThan": "a5e4d6cb4f6848b8906c1c493f99a8ccc0638515",
"versionType": "git",
"status": "affected"
},
{
"version": "2f1dfbe185075a50dc8f0490a136377af53a1c62",
"lessThan": "f68038c77a2f38c09c7e2e4f7fa1f4e246fdf2c9",
"versionType": "git",
"status": "affected"
},
{
"version": "2f1dfbe185075a50dc8f0490a136377af53a1c62",
"lessThan": "e6de568d3eda3e3c01c868fabd7a9535d5ee4a73",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"net/batman-adv/distributed-arp-table.c",
"net/batman-adv/types.h"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3.8",
"status": "affected"
},
{
"version": "0",
"lessThan": "3.8",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.271",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.221",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.188",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.157",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.110",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.52",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.6",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/159360a0de831845c4500b4f8638decdcd624040",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/1674855a5b6eacfe35f4db3095d7055c25467274",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/181012b3d29c51197c235ee5871fc7512c736855",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/259db2c04586d40b82c5c3002b1e28b0698a0bb7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/66238e2a74eca5dabf85b0cd2c3c944e474dc2fd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a5e4d6cb4f6848b8906c1c493f99a8ccc0638515",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e6de568d3eda3e3c01c868fabd7a9535d5ee4a73",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f68038c77a2f38c09c7e2e4f7fa1f4e246fdf2c9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}