2 matches found
CVE-2025-21823 batman-adv: Drop unmanaged ELP metric worker
In the Linux kernel, the following vulnerability has been resolved: batman-adv: Drop unmanaged ELP metric worker The ELP worker needs to calculate new metric values for all neighbors "reachable" over an interface. Some of the used metric sources require locks which might need to sleep. This sleep...
CVE-2025-21823
CVE-2025-21823 relates to the Batman-adv (batman-adv) Linux kernel module. The root cause was the ELP metric worker per interface, which could sleep while iterating over neighbors under an RCU list, creating a race that could lead to invalid memory access if the worker was canceled or if interfac...