CVE-2026-63835

kernel: batman-adv: v: prevent OGM aggregation on disabled hardif

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · July 21, 2026

Description

A flaw was found in the Linux kernel's Better Approach To Mobile Ad-hoc Networking (batman-adv) module. When a batman-adv interface is disabled, the system can still queue network packets (skbs) for aggregation. These packets are not properly freed, leading to a memory leak. This can result in resource exhaustion and a Denial of Service (DoS) condition for the system.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime