The vulnerability in the Linux kernel's batman-adv tp_meter component was caused by incorrect handling of the tp_vars reference during receiver shutdown. The timer handler batadv_tp_receiver_shutdown() and the function batadv_tp_stop_all() had flawed logic coordinating the release of this reference. Specifically, if the timer had already expired, batadv_tp_stop_all() would skip releasing the reference, and batadv_tp_receiver_shutdown() would also fail to release it, causing a reference leak. The fix adds an atomic variable 'receiving' to track the state and ensure that only one side releases the tp_vars reference, eliminating the uncertainty and preventing the leak.

The vulnerability causes a reference leak in the Linux kernel's batman-adv tp_meter receiver shutdown process. This could potentially lead to resource leaks in the kernel, which might degrade system stability or performance over time. No known exploits in the wild have been reported, and no direct impact such as privilege escalation or remote code execution is indicated.

A fix for this vulnerability has been implemented in the Linux kernel. Users should update to a kernel version that includes this patch. Since no patch links or specific versions are provided, check the official Linux kernel advisories or repositories for the fixed version. No additional mitigation steps are indicated.