Memory Handling Vulnerability in Linux Kernel batman-adv by Linux Foundation

CVE-2026-64218

What is CVE-2026-64218?

A vulnerability exists within the Linux kernel's batman-adv component that improperly manages memory during the backbone gateway purge process. Specifically, the batadv_bla_purge_backbone_gw function may lead to improper access of freed memory if report_work is running or pending. To rectify this, the implementation has been restructured to ensure that the lock is acquired and released correctly while processing each entry, thereby preventing potential memory corruption and ensuring stability in the system.

References