PT-2026-64333 · Linux · Linux
CVE-2026-64218
·
Publicado
2026-07-24
·
Atualizado
2026-07-24
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: fix report work leak on backbone gw purge
batadv bla purge backbone gw() removes stale backbone gateway entries,
but fails to properly handle their associated report work:
- If report work is running, the purge must wait for it to finish before freeing the backbone gw, otherwise the worker may access freed memory (e.g. bat priv).
- If report work is pending, the purge must cancel it and release the reference held for that pending work item.
The previous implementation called hlist for each entry safe() inside a
spin lock bh() section, but cancel work sync() may sleep and therefore
cannot be called from within a spinlock-protected region.
Restructure the loop to handle one entry per spinlock critical section:
acquire the lock, find the next entry to purge, remove it from the hash
list, then release the lock before calling cancel work sync() and
dropping the hash entry reference. Repeat until no more entries require
purging.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux