The batman-adv module in the Linux kernel does not terminate tp_meter sessions when a mesh interface is removed. As a result, sender threads or late tp_meter packets can continue to operate against a mesh instance that is already shutting down, potentially leading to uncontrolled resource consumption (CWE-366).

All Linux kernels that include the batman-adv module and lack the recent commit that stops tp_meter sessions during mesh teardown are affected. Systems running distribution kernels that have not yet integrated this patch and that use batman‑adv for mesh networking are at risk.

Based on the description, it is inferred that an attacker would need to trigger a mesh interface removal while tp_meter sessions are active, which typically indicates local or privileged network access to the affected node. The CVSS score of 7.8 reflects a high severity, while the EPSS score remains <1% and the vulnerability is not listed in CISA’s KEV catalog. Exploitation would require the attacker to force batadv_mesh_free() to run prematurely, potentially causing ongoing tp_meter processing against a shutting‑down instance. The practical likelihood of exploitation is considered low to moderate, as the attacker must have control over the mesh teardown operation. The resulting impact could be resource exhaustion or incomplete cleanup of sender threads, leading to denial of service on the node.