The batadv_v_elp_get_throughput function in the batman-adv driver can be invoked while the RTNL lock is already held, which causes a deadlock when cancel_delayed_work_sync cancels the work queue item. The resulting lock contention stalls critical network stack operations, effectively denying network services. This vulnerability is a classic example of improper locking leading to a deadlock and race condition (CWE‑833 and CWE‑667).

All Linux kernel releases that ship the batman‑adv driver prior to the fix are affected. The vendor is Linux, product the Linux kernel; no specific version range is provided, so any active batman‑adv installation that predates the commit 192f40ad8a7dac58dae9199a065dbf7e6e67b75b is vulnerable.

Explicit exploitation metrics are unavailable; the EPSS score is < 1% (0.00032), indicating a very low but nonzero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The issue requires local code execution or a malicious module to trigger the problematic path, making the attack vector local. The impact is a denial of service via kernel deadlock, which can be considered moderate to high risk in environments that rely on batman‑adv for network connectivity.