The batman‑adv module in the Linux kernel contains a telemetry receiver that mistakenly fails to release a reference to the tp_vars structure when the shutdown timer fires. The bug causes a memory/resource leak which, over time, could exhaust kernel resources and degrade system stability. The weakness is a classic reference leak (CWE‑911) where an unpaired release of a refcounted object leads to resource exhaustion.

All Linux kernel builds that ship with the batman‑adv driver and include the tp_meter implementation prior to the commit that adds the atomic receiving flag are potentially vulnerable. Because the fix is tied to a kernel-patched code path, any kernel older than the commit implementing the atomic flag may be affected, regardless of the exact version string.

The Exploit Probability Score is below 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a very low current exploitation likelihood. Attacks would need to trigger the flawed receiver shutdown sequence, which typically requires access to kernel memory or elevated privileges, so the attack vector is local and privileged. No remote exploitation path is reported. While the leak could eventually lead to resource exhaustion, the probability of exploitation remains low but warrants timely remediation.