PULSE
EN VIVO20señales / 24h
FEED
ransomplay reclama a First Tek · TW · Technologyransomplay reclama a Preferred Financial Group · US · Financial Servicesransomthegentlemen reclama a TopMark Funding · US · Financial Servicesransomthegentlemen reclama a Control Concepts Technology · US · Technologyransomchaos reclama a healthcarehighways.com · US · Healthcareransomgunra reclama a worldtube · KR · Technologyransomqilin reclama a WD Masonry & Concrete · US · Otherransomakira reclama a University SprinklerSystems · Manufacturingransomorova reclama a Tat Fung Textile Co., Ltd. · HK · Manufacturingransomorova reclama a Integrated Site Management · US · Professional Servicesransomorova reclama a Conceptual Designs, Inc. · US · Otherransomorova reclama a JK Capital Management Limited · HK · Financial Servicesransomorova reclama a Global Friction Products, Inc · US · Manufacturingransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturingransomplay reclama a First Tek · TW · Technologyransomplay reclama a Preferred Financial Group · US · Financial Servicesransomthegentlemen reclama a TopMark Funding · US · Financial Servicesransomthegentlemen reclama a Control Concepts Technology · US · Technologyransomchaos reclama a healthcarehighways.com · US · Healthcareransomgunra reclama a worldtube · KR · Technologyransomqilin reclama a WD Masonry & Concrete · US · Otherransomakira reclama a University SprinklerSystems · Manufacturingransomorova reclama a Tat Fung Textile Co., Ltd. · HK · Manufacturingransomorova reclama a Integrated Site Management · US · Professional Servicesransomorova reclama a Conceptual Designs, Inc. · US · Otherransomorova reclama a JK Capital Management Limited · HK · Financial Servicesransomorova reclama a Global Friction Products, Inc · US · Manufacturingransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturing
← Todos los CVEs
CVE Watch27 jul 2026

CVE-2026-63835

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an inte

CVSS

Sin CVSS

EPSS

0.2%

p7

KEV

Exploit Today

2

0-100

Publicado: 19 jul 2026 · Última mod.: 27 jul 2026

EPSS · 30d
0.2%EPSS · 30 días0.2%
2026-07-202026-08-03
Descripción técnica

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadv_hardif_disable_interface() -> ... -> batadv_v_ogm_iface_disable(). In this process, the skb aggr_list is also freed. But batadv_v_ogm_send_meshif() can still queue new skbs (via batadv_v_ogm_queue_on_if()) to the aggr_list. This will only stop after all cores can no longer find the RCU protected list of hard interfaces. These queued skbs will never be freed or consumed by batadv_v_ogm_aggr_work. The batadv_v_ogm_iface_disable() function must block batadv_v_ogm_queue_on_if() to avoid leak of skbs.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.