Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla – only unloads claims that have not yet been released. When the batadvblapurgeclaims function processes the list of claims, it only uses an rcureadlock to traverse the hash list. Due to potential parallel operatio...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when deleting claims When the batadvbladelbackboneclaims function deletes all claims for a backbone, it does this by removing the link entry from the hash list. This list entry was one of t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: Reacquiring the GW address after skb realloc The batadvblaisbackbonegw function calls the skbmaypull function, which may reallocate the buffer behind the skb. Variables that pointed to the old buffer need to be...

SUSE CVE-2026-89948

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbonegw could make sure that all claims gets removed. But this function is...

Linux Distros Unpatched Vulnerability : CVE-2026-93203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: bla: avoid CRC corruption due to parallel claim add batadvblaaddclaim is used to add claims and modify the backbone of claims for CLAIM frames from...

CVE-2026-93203 batman-adv: bla: avoid CRC corruption due to parallel claim add

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadvblaaddclaim is used to add claims and modify the backbone of claims for CLAIM frames from remote backbones and local packets. When it handles a claim, it needs...

CVE-2026-93203

CVE-2026-93203 is a race condition in the Linux kernel's batman-adv mesh networking module, specifically in the Bridge Loop Avoidance (BLA) subsystem. The function batadv_bla_add_claim() can corrupt the CRC16 of backbone gateway entries when a new claim and a backbone ownership change execute in ...

CVE-2026-93203 batman-adv: bla: avoid CRC corruption due to parallel claim add

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadvblaaddclaim is used to add claims and modify the backbone of claims for CLAIM frames from remote backbones and local packets. When it handles a claim, it needs...

PT-2026-94999

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where parallel execution of claim addition and backbone modification can lead to CRC corruption. The batadv bla add claim function handles adding...

DEBIAN-CVE-2026-89948

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbonegw could make sure that all claims gets removed. But this function is...

CVE-2026-89948 batman-adv: bla: fix freeing of claims on meshif deletion

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbonegw could make sure that all claims gets removed. But this function is...

CVE-2026-89948

CVE-2026-89948 affects the batman-adv (B.A.T.M.A.N. advanced) module in the Linux kernel , specifically its BLA (Backbone Link Aggregation) subsystem. The root cause is a logic bug: when a mesh interface is deleted, batadv_bla_del_backbone_claims() is never actually executed because bat_priv->...

EUVD-2026-80548

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbonegw could make sure that all claims gets removed. But this function is...

CVE-2026-89948: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbonegw could make sure that all claims gets removed. But this function is...

PT-2026-93589

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv BLA Border Gateway Advertisement component during the deletion of a mesh interface. The function batadv bla del backbone claims called via batadv bla...

Linux Distros Unpatched Vulnerability : CVE-2026-89948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbone...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Hold the reference to the backbone gateways. The batadvblaaddclaim function can replace claim-backbonegw, and drop the last reference of the old gateway while the readers still follow the pointer. The netlink claim du...

SUSE CVE-2026-72233

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull called by batadvblaisbackbonegw could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-72233

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull called by batadvblaisbackbonegw could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

EUVD-2026-59132

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskbmaypull called by batadvblaisbackbonegw could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...