58 matches found
SUSE CVE-2026-64093
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: directly shut down timer on cleanup batadvtpsendercleanup was calling timerdeletesync followed by timerdelete to guard against the timer handler re-arming itself between the two calls. This double-deletion ha...
CVE-2026-64092
A flaw was found in the Linux kernel's batman-adv module, specifically within the tpmeter component. The batadvtpreceivershutdown function, responsible for releasing tpvars references, contains flawed logic for coordinating this release during receiver shutdown. This can lead to a reference leak,...
SUSE CVE-2026-63834
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...
SUSE CVE-2026-63836
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...
CVE-2026-64093
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: directly shut down timer on cleanup batadvtpsendercleanup was calling timerdeletesync followed by timerdelete to guard against the timer handler re-arming itself between the two calls. This double-deletion ha...
CVE-2026-64093
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: directly shut down timer on cleanup batadvtpsendercleanup was calling timerdeletesync followed by timerdelete to guard against the timer handler re-arming itself between the two calls. This double-deletion ha...
CVE-2026-64093 batman-adv: tp_meter: directly shut down timer on cleanup
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: directly shut down timer on cleanup batadvtpsendercleanup was calling timerdeletesync followed by timerdelete to guard against the timer handler re-arming itself between the two calls. This double-deletion ha...
CVE-2026-64093
The CVE concerns batman-adv (Linux kernel) where tp_meter cleanup caused a potential re-arm of a timer due to two-step deletion. batadv_tp_sender_cleanup() called timer_delete_sync() followed by timer_delete(); the fix replaces both calls with a single timer_shutdown_sync() that waits for any run...
CVE-2026-64092
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: fix tpvars reference leak in receiver shutdown The receiver shutdown timer handler, batadvtpreceivershutdown, is responsible for releasing the tpvars reference it holds. However, the existing logic for...
CVE-2026-63836
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...
CVE-2026-63836
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...
CVE-2026-63836 batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...
CVE-2026-63834
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...
CVE-2026-63834
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...
CVE-2026-63834 batman-adv: tp_meter: restrict number of unacked list entries
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restrict number of unacked list entries When the unackedlist is unbound, an attacker could send messages with small lengths and appropriated seqno + gaps to force the receiver to allocate more and more...
PT-2026-61409
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the batman-adv tp meter component during receiver shutdown. The receiver shutdown timer handler, batadv tp receiver shutdown, is responsible for releasing the ...
PT-2026-61152
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero error exists in the batman-adv module within the batadv tp update cwnd function. The issue occurs during the calculation of dec cwnd when the cwnd variable reaches the...
PT-2026-61150
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service issue exists in the batman-adv module. An attacker can send messages with small lengths and specific sequence numbers and gaps to force the receiver to allocate an...
