CVE-2026-93204— batman-adv: dat: atomically update mac addresses
Quick assessment
Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Linux 内核中，以下漏洞已得到修复： batman-adv: dat: 原子化更新 MAC 地址 当在 中更新 MAC 地址时，目前使用的是简单的拷贝函数进行更新。并发的读取者可能只看到更新的一部分。在最坏的情况下，读取者可能会将仅被更新了一半的 MAC 地址通过网络传输，或者使用它生成 ARP 响应——从而污染 ARP 缓存。 可以使用 来存储 MAC 地址的 48 位数据。这样，读取者将只看到旧的 MAC 地址或新的 MAC 地址，而不会看到两者的混合状态。
Possible ATT&CK Techniques 2 AI
T1010 · Application Window Discovery T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-93204
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
batman-adv: dat: atomically update mac addresses
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: dat: atomically update mac addresses
When a MAC address is updated in batadv_dat_entry_add(), it is done using a
simple copy function. A parallel reader might only see parts of this
update. In worst case, the reader is transporting the half updated MAC
address over the network or is creating an ARP response using it -
poisoning the ARP cache.
atomic64_t can be used to store the 48 bit of a mac address. A reader will
then either see the old mac address or the new one - never a mixture of
both.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-93204
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-93204
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-93204 (4)
Other References for CVE-2026-93204 (3)
Same Patch Batch · Linux · 2026-09-17 · 602 CVEs total
| CVE-2026-90255 | Bluetooth: hci_conn: fix the SCO setup context lifetime | |
| CVE-2026-90238 | media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path | |
| CVE-2026-90240 | iommu/vt-d: Flush context cache with correct SID when tearing down aliases | |
| CVE-2026-90239 | media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem() | |
| CVE-2026-90241 | iommu/vt-d: Tear down scalable-mode context on probe failure | |
| CVE-2026-90243 | iommu/vt-d: Clear Present bit before tearing down copied context entry | |
| CVE-2026-90242 | iommu/vt-d: Fix iopf_refcount leak on RID domain replacement | |
| CVE-2026-90244 | iommu/dma: Restore locking around msi_page_list | |
| CVE-2026-90245 | fbdev: kyro: Validate overlay viewport coordinates | |
| CVE-2026-90246 | apparmor: fix integer overflow in verify_tags() bounds check | |
| CVE-2026-90247 | bpf: Fix mmap_lock leak in irq_work path | |
| CVE-2026-90248 | net/sched: cls_api: fix teardown of an adopted proto on insert-race loss | |
| CVE-2026-90249 | iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes | |
| CVE-2026-90250 | bpf, cgroup: Fix storage null-ptr-deref after replacing prog | |
| CVE-2026-90251 | Bluetooth: MSFT: validate evt_prefix_len against the response length | |
| CVE-2026-90253 | Bluetooth: MGMT: free the mesh send cancel command when it is cancelled | |
| CVE-2026-90252 | Bluetooth: MGMT: free the HCI command when it is cancelled | |
| CVE-2026-90254 | Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths | |
| CVE-2026-90256 | Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind | |
| CVE-2026-90268 | scsi: sd: Fix error handling in sd_probe() after large pool creation failure |
Showing top 20 of 602 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
-
CVE-2026-93203
batman-adv: bla: avoid CRC corruption due to parallel claim -
CVE-2026-93202
i3c: master: Fix recursive locking during device registratio -
CVE-2026-93200
i3c: master: Fix use-after-free of master->this -
CVE-2026-93201
dm-pcache: validate seg_id fields from persistent memory -
CVE-2026-93199
i3c: master: Do not treat master device as a duplicate targe
Same vendor: Linux
-
CVE-2026-93203
batman-adv: bla: avoid CRC corruption due to parallel claim -
CVE-2026-93202
i3c: master: Fix recursive locking during device registratio -
CVE-2026-93200
i3c: master: Fix use-after-free of master->this -
CVE-2026-93201
dm-pcache: validate seg_id fields from persistent memory -
CVE-2026-93199
i3c: master: Do not treat master device as a duplicate targe
V. Comments for CVE-2026-93204
No comments yet