PT-2026-61409 · Linux · Linux
CVE-2026-64092
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: tp meter: fix tp vars reference leak in receiver shutdown
The receiver shutdown timer handler, batadv tp receiver shutdown(), is
responsible for releasing the tp vars reference it holds. However, the
existing logic for coordinating this release with batadv tp stop all() was
flawed.
timer shutdown sync() guarantees the timer will not fire again after it
returns, but it returns non-zero only when the timer was pending at the
time of the call. If the timer had already expired (and
batadv tp stop all() would unsucessfully try to rearm itself),
batadv tp stop all() skips its batadv tp vars put(), and
batadv tp receiver shutdown() fails to put its own reference as well.
Fix this by introducing a new atomic variable receiving that is set to 1
when the receiver is initialized and cleared atomically with atomic xchg()
by whichever side claims it first. Only the side that observes the
transition from 1 to 0 is responsible for releasing the tp vars timer
reference, eliminating the uncertainty.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux