Linux Kernel Vulnerability in batman-adv Metric Worker Implementation
CVE-2025-21823
What is CVE-2025-21823?
A vulnerability in the Linux kernel's batman-adv module has been identified, affecting the calculation of ELP metrics for network interfaces. This issue arises due to an improper handling of neighbor metrics that may lead to invalid memory access if not managed correctly. When attempting to cancel a metric worker, potential deadlocks can occur during the interface removal process, as certain locks held by the worker conflict with the deactivation procedure. The resolution involves redesigning the handling of metric updates to better align with RCU protected contexts, ensuring stability and reliability within the network management protocol.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux c833484e5f3872a38fe232c663586069d5ad9645 < 1c334629176c2d644befc31a20d4bf75542f7631
Linux c833484e5f3872a38fe232c663586069d5ad9645
Linux c833484e5f3872a38fe232c663586069d5ad9645 < 3c0e0aecb78cb2a2ca1dc701982d08fedb088dc6