{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "2f1dfbe185075a50dc8f0490a136377af53a1c62"
            },
            {
              "fixed": "159360a0de831845c4500b4f8638decdcd624040"
            },
            {
              "fixed": "259db2c04586d40b82c5c3002b1e28b0698a0bb7"
            },
            {
              "fixed": "1674855a5b6eacfe35f4db3095d7055c25467274"
            },
            {
              "fixed": "66238e2a74eca5dabf85b0cd2c3c944e474dc2fd"
            },
            {
              "fixed": "a5e4d6cb4f6848b8906c1c493f99a8ccc0638515"
            },
            {
              "fixed": "f68038c77a2f38c09c7e2e4f7fa1f4e246fdf2c9"
            },
            {
              "fixed": "e6de568d3eda3e3c01c868fabd7a9535d5ee4a73"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.8.0"
            },
            {
              "fixed": "5.15.221"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.188"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.157"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.110"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.52"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.2.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93204.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: dat: atomically update mac addresses\n\nWhen a MAC address is updated in batadv_dat_entry_add(), it is done using a\nsimple copy function. A parallel reader might only see parts of this\nupdate. In worst case, the reader is transporting the half updated MAC\naddress over the network or is creating an ARP response using it -\npoisoning the ARP cache.\n\natomic64_t can be used to store the 48 bit of a mac address. A reader will\nthen either see the old mac address or the new one - never a mixture of\nboth.",
  "id": "CVE-2026-93204",
  "modified": "2026-09-18T03:30:24.146749469Z",
  "published": "2026-09-17T16:12:24.403Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/159360a0de831845c4500b4f8638decdcd624040"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1674855a5b6eacfe35f4db3095d7055c25467274"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/259db2c04586d40b82c5c3002b1e28b0698a0bb7"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/66238e2a74eca5dabf85b0cd2c3c944e474dc2fd"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a5e4d6cb4f6848b8906c1c493f99a8ccc0638515"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e6de568d3eda3e3c01c868fabd7a9535d5ee4a73"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f68038c77a2f38c09c7e2e4f7fa1f4e246fdf2c9"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93204.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93204"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "batman-adv: dat: atomically update mac addresses"
}