Linux kernel Distributed ARP Table Buffer Overflow DoS

The vulnerability of the batadvdatsnoopincomingdhcpack function in the net/batman-adv/distributed-arp-table.c component of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

ROS-20261014-73-0081

The vulnerability of the batadvblaaddclaim function in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker...

ROS-20261014-73-0055

The vulnerability of the batadvivogmsendtoif function in the net/batman-adv/bativogm.c module, which is part of the Linux kernel’s networking functions, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261014-73-0084

The vulnerability of the function batadvblapurgeclaims in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow a malicious actor to cause...

CVE-2026-93204

A flaw was found in the batman-adv component of the Linux kernel. When a Media Access Control MAC address is updated, the update is not performed atomically. This allows a parallel process to read a partially updated MAC address, which could then be used to poison the Address Resolution Protocol...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when deleting claims When the batadvbladelbackboneclaims function deletes all claims for a backbone, it does this by removing the link entry from the hash list. This list entry was one of t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid OGM aggregation when skbtailroom is insufficient. When the OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated only with packetlen bytes, while a later packet can...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error The batadvdatforwarddata function calls pskbcopyforclone to duplicate an skb for each DHT candidate. However, it does not check the return value before passing it to the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: the timer on cleanup is directly shut down The function batadvtpsendercleanup called timerdeletesync and then timerdelete was used to prevent the timer handler from rearming itself between these two calls. Th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: Reacquiring the GW address after skb realloc The batadvblaisbackbonegw function calls the skbmaypull function, which may reallocate the buffer behind the skb. Variables that pointed to the old buffer need to be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 “net: bridge: xmit: make sure we have at least eth header len bytes”, it is possible for a local user with eBPF TC hook access to attach a tc...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Access to unicastttvnskb-data is only possible after skb realloc. The pskbmaypull function called by batadvgetvid could reallocate the buffer behind the skb. Variables that pointed to the old buffer need to be...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr dereferencing for claims via the dropped interface. Without holding the rtnl lock, a hardif might be set as the primary interface of a meshif. However, while operating on this interface, it may...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Hold the reference to the backbone gateways. The batadvblaaddclaim function can replace claim-backbonegw, and drop the last reference of the old gateway while the readers still follow the pointer. The netlink claim du...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: restricts the number of unacked list entries When the unackedlist is not bounded, an attacker could send messages with short lengths and appropriate sequence numbers, followed by gaps, to force the receiver t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla – only unloads claims that have not yet been released. When the batadvblapurgeclaims function processes the list of claims, it only uses an rcureadlock to traverse the hash list. Due to potential parallel operatio...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim addition The batadvblaaddclaim function is used to add claims and modify the backbone of claims for CLAIM frames from remote backbones and local packets. When it handles...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net: batman-adv: fix error handling Syzbot reported an ODEBUG warning in batadvncmeshfree. The problem lay in incorrect error handling in batadvmeshinit. Before this patch, batadvmeshinit would call batadvmeshfree in case any...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid timing-related checks for WARNON. The soft/batadv interface for a queued OGM can be modified during the period in which the OGM is queued for transmission, as well as when the OGM is actually transmitted by the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: The unmanaged ELP worker is removed. The ELP worker needs to calculate new metric values for all “reachable” neighbors via an interface. Some of the metric calculation functions require locks, which may need to be...