In the Linux kernel, the following vulnerability has been resolved:
batman-adv: fix panic during interface removal
Reference counting is used to ensure that batadv_hardif_neigh_node and batadv_hard_iface are not freed before/during batadv_v_elp_throughput_metric_update work is finished.
But there isn't a guarantee that the hard if will remain associated with a soft interface up until the work is finished.
This fixes a crash triggered by reboot that looks like this:
Call trace: batadv_v_mesh_free+0xd0/0x4dc [batman_adv] batadv_v_elp_throughput_metric_update+0x1c/0xa4 process_one_work+0x178/0x398 worker_thread+0x2e8/0x4d0 kthread+0xd8/0xdc ret_from_fork+0x10/0x20
(the batadv_v_mesh_free call is misleading, and does not actually happen)
I was able to make the issue happen more reliably by changing hardif_neigh->bat_v.metric_work work to be delayed work. This allowed me to track down and confirm the fix.
[[email protected]: prevent entering batadv_v_elp_get_throughput without soft_iface]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kselftests-kmp-64kb | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-intelUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-bluefieldUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oemUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-oracleUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-azureUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64kUpgrade linux-image-azure-6.8Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-awsUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-osp1Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04c | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub