Linux Kernel CVE-2026-52922

Vendor-released patch: upgrade to a fixed Linux stable kernel - 5.10.258, 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11, or 7.1 (or later in each series), matching your running branch. The upstream fix simply adds a NULL check and skips forwarding to the current DHT candidate on allocation failure; the patched commits are available at https://git.kernel.org/stable/c/866ac1d57040ed0b44ca732e3c66b3aa6b93011c and the related stable hashes listed in the references. If you cannot patch immediately, the most effective compensating control is to disable the Distributed ARP Table on affected mesh interfaces (batctl dat_enabled 0), which removes the vulnerable forwarding path at the cost of increased ARP flooding/broadcast overhead on the mesh; alternatively, if mesh routing is not required, unload or blacklist the batman-adv module entirely, which fully eliminates exposure but disables mesh networking. Restricting which nodes can join the mesh fabric also limits who can drive DAT forwarding traffic. Reference advisories: https://nvd.nist.gov/vuln/detail/CVE-2026-52922 and https://vuldb.com/vuln/373189.