Linux Kernel CVE-2026-52931

Apply the vendor-released stable kernel updates: upgrade to 5.10.258, 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11, 7.1, or later as appropriate to your branch (Vendor-released patch: see fixed versions above), and reboot. Distribution users should install the corresponding distro kernel update once it incorporates these commits; the upstream fixes are at https://git.kernel.org/stable/c/0e388af04b3958b178a1b979527f93eb46ea1fee and the sibling commits listed in the EUVD. If immediate patching is not possible, the most effective compensating control is to avoid loading the vulnerable code: do not load the batman-adv module (blacklist it via modprobe) on systems that do not require mesh networking, which fully removes the attack surface but disables B.A.T.M.A.N. mesh functionality. Where batman-adv is required, avoid initiating or running tp_meter throughput-measurement sessions and restrict mesh membership to trusted nodes (e.g., authenticated/encrypted mesh links), accepting that this limits ad-hoc mesh participation. Reference the NVD advisory at https://nvd.nist.gov/vuln/detail/CVE-2026-52931 for tracking.