The batman‑adv module of the Linux kernel contains a logic error caused by an incorrect return value check during TT request buffer allocation. When the allocation fails, the code mistakenly interprets this as success, leaving stale TT requests persistent. This flaw represents a CWE‑772 weakness that can lead to uncontrolled resource consumption, specifically a storm of TT request traffic that floods the network and drains node resources. The resulting denial of service can affect all devices participating in the batman‑adv network, disrupting communication and potentially exhausting network bandwidth.

All Linux kernel releases shipping the batman‑adv module without the recent patch are potentially affected. Because no specific version range is provided, any kernel that includes batman‑adv prior to the fix is vulnerable. This encompasses most current Linux distributions that use the standard kernel, as the module is a standard component of the Linux kernel kernel tree.

The CVSS score of 7.5 indicates a high severity, while an EPSS score of less than 1% and absence from the CISA KEV catalog suggest a low likelihood of widespread exploitation. Based on the description, an attacker would need to trigger repeated TT request allocation failures, which could be achieved by flooding the node with malformed packets or through a local compromise that forces allocation failures. The likely attack vector is local or remote traffic manipulation within a batman‑adv network, though public exploits are not known. The low EPSS indicates that the vulnerability is currently considered low risk for exploitation, but the high impact warrants immediate patching if exposure is possible.