-

CVE-2026-63835

batman-adv: v: prevent OGM aggregation on disabled hardif

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: v: prevent OGM aggregation on disabled hardif

When an interface gets disabled, the worker is correctly disabled by
batadv_hardif_disable_interface() -> ... -> batadv_v_ogm_iface_disable().
In this process, the skb aggr_list is also freed.

But batadv_v_ogm_send_meshif() can still queue new skbs (via
batadv_v_ogm_queue_on_if()) to the aggr_list. This will only stop after all
cores can no longer find the RCU protected list of hard interfaces. These
queued skbs will never be freed or consumed by batadv_v_ogm_aggr_work.

The batadv_v_ogm_iface_disable() function must block
batadv_v_ogm_queue_on_if() to avoid leak of skbs.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version f89255a02f1d75d8e1b9d1c31435fcb64840cb2a
Version < d462ced79dd430200cf888984e8005da77fc810b
Status affected
Version f89255a02f1d75d8e1b9d1c31435fcb64840cb2a
Version < f79deaaf822ab0ee2424cf28781f9ab91576bea3
Status affected
Version f89255a02f1d75d8e1b9d1c31435fcb64840cb2a
Version < d3569327fc7395b2b0461a0a0cb77a0bb74786c0
Status affected
Version f89255a02f1d75d8e1b9d1c31435fcb64840cb2a
Version < 97644fdaaf6446ffbe182c5eb804fceb5b1a51b7
Status affected
Version f89255a02f1d75d8e1b9d1c31435fcb64840cb2a
Version < f04dde74399431fb07abbdd9cd5d0ed624771d04
Status affected
Version f89255a02f1d75d8e1b9d1c31435fcb64840cb2a
Version < 3d4548c96d6f21ac1a9b06c5f82f3ef439c87023
Status affected
Version f89255a02f1d75d8e1b9d1c31435fcb64840cb2a
Version < 86ab6b6fb5b82163bf6c45780bb72150021d7349
Status affected
Version f89255a02f1d75d8e1b9d1c31435fcb64840cb2a
Version < d11c00b95b2a3b3934007fc003dccc6fdcc061ad
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.4
Status affected
Version 0
Version < 5.4
Status unaffected
Version <= 5.10.*
Version 5.10.260
Status unaffected
Version <= 5.15.*
Version 5.15.211
Status unaffected
Version <= 6.1.*
Version 6.1.177
Status unaffected
Version <= 6.6.*
Version 6.6.144
Status unaffected
Version <= 6.12.*
Version 6.12.95
Status unaffected
Version <= 6.18.*
Version 6.18.38
Status unaffected
Version <= 7.1.*
Version 7.1.3
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.071
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d462ced79dd430200cf888984e8005da77fc810b
https://git.kernel.org/stable/c/f79deaaf822ab0ee2424cf28781f9ab91576bea3
https://git.kernel.org/stable/c/d3569327fc7395b2b0461a0a0cb77a0bb74786c0
https://git.kernel.org/stable/c/97644fdaaf6446ffbe182c5eb804fceb5b1a51b7
https://git.kernel.org/stable/c/f04dde74399431fb07abbdd9cd5d0ed624771d04
https://git.kernel.org/stable/c/3d4548c96d6f21ac1a9b06c5f82f3ef439c87023
https://git.kernel.org/stable/c/86ab6b6fb5b82163bf6c45780bb72150021d7349
https://git.kernel.org/stable/c/d11c00b95b2a3b3934007fc003dccc6fdcc061ad