Fix error handling in batman-adv

CVE-2021-47482

What is CVE-2021-47482?

A vulnerability in the batman-adv module of the Linux kernel relates to improper error handling during initialization processes. This issue arises when the batadv_mesh_init() function fails, leading to a situation where uninitialized fields are not correctly cleaned up. Instead of selectively reverting individual initialization calls, the function in the past invoked batadv_mesh_free() indiscriminately, resulting in potential memory corruption and system instability. By refining the error handling approach and ensuring that allocated memory can be correctly unwound based on the initialization steps, the integrity of the system can be maintained, preventing access to uninitialized data pointers. This improvement not only enhances security by preventing serious operational flaws but also optimizes performance by reducing unnecessary cleanup calls.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References