A flaw in the batman‑adv module of the Linux kernel allows a use‑after‑free during the purge of stale backbone gateway entries. When a scheduled report_work task is either running or pending, the purge removes and frees the associated data structure too early. If the worker later accesses the freed memory, kernel memory corruption can occur. The impact is limited to kernel integrity; no explicit privilege escalation or denial‑of‑service is described in the input data.

This vulnerability affects the batman‑adv networking daemon bundled with the Linux kernel. Any kernel installation that does not incorporate the patch commit 0459430add32ea41f3e2ef9351610e6d33627a6b is susceptible. The exact kernel version ranges are not specified in the provided data, but the fix is present in kernel releases that include the mentioned commit and subsequent updates.

The CVSS score of 7.8 indicates a high severity. The EPSS score of less than 1 % points to a low likelihood of exploitation at present, and the flaw is not listed in the CISA KEV catalog. The attack vector is not directly stated; it is inferred that an adversary must trigger the purge of a stale backbone gateway while a report_work task is active, possibly via crafted network traffic or local manipulation of the batman‑adv service. The description does not confirm remote privilege escalation or other advanced impacts.