Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 “net: bridge: xmit: make sure we have at least eth header len bytes”, it is possible for a local user with eBPF TC hook access to attach a tc...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadvdatentryadd, it is done using a simple copy function. A parallel reader might only see parts of this update. In the worst case, the reader is...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicastttvn skb-data only after skb realloc The pskbmaypull function called by batadvgetvid may reallocate the buffer behind the skb. Variables referencing the old buffer must be reassigned to prevent...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadvblaaddclaim is used to add claims and modify the backbone of claims for CLAIM frames from remote backbones and local packets. When it handles a claim, it needs...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primaryif leak on failed linearization If the skb has a fraglist, it must be linearized before it can be split using skbsplit. However, when this step fails, it must not only free the skb but also handle the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored within it. This number is an u16 value; it is then multiplied by the size of the struct batadvtvlvttvlandata 8 bytes. As a...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskbmaypull in batadvinterfacerx could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull function called by batadvblaisbackbonegw may reallocate the buffer behind the skb. Variables referencing the old buffer must be reassigned to prevent...

K000164043: Linux kernel vulnerability CVE-2026-46198

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix integer overflow on buffpos Fixing an integer overflow present in batadvivogmsendtoif. The size check is done using the int type in batadvivogmaggrpacket whereas the buffpos variable...

Linux kernel Net Batman Adv Routing Buffer Overflow

The vulnerability in the net/batman-adv/routing.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and availability of protected information...

Linux kernel Batadv Interface TX Buffer Overflow DoS

The vulnerability in the batadvinterfacetx function within the net/batman-adv/mesh-interface.c component of the Linux kernel system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the batadvfragsendpacket function in the net/batman-adv/fragmentation.c component of the Linux kernel is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the batadvfragsendpacket function in the net/batman-adv/fragmentation.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the batadvtttvlvunicasthandlerv1 function in the net/batman-adv/translation-table.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CLSA-2026-1789373487 Fix of 123 CVEs

CVE-2025-68214 - timers: Fix NULL function pointer race in timershutdownsync CVE-2025-68214 CVE-2024-58093 - PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-58093 CVE-2026-72463 - xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 CVE-2026-64600 -...

CLSA-2026-1789373515 Fix of 124 CVEs

CVE-2025-68214 - timers: Fix NULL function pointer race in timershutdownsync CVE-2025-68214 CVE-2024-58093 - PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-58093 CVE-2026-72463 - xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 CVE-2026-64600 -...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: batman-adv: clear current gateway during teardown batadvgwnodefree removes the gateway list entries during mesh teardown, but it does not clear the currently selected gateway. This leaves stale gateway state behind across cleanup...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: batman-adv: avoid OGM aggregation when skb tailroom is insufficient When the OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated with only packetlen bytes, while a later packet can...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT-based TVLV is generated by first checking the number of VLANs that have at least one TT entry. A new buffer with the correct size for those VLANs is then allocated...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...