Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64218

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbone_gw purge batadv_bla_purge_backbone_gw() removes stale backbone gateway entries, but fails to properly handle their associated report_work: - If report_work is running, the purge must wait for it to finish before freeing the backbone_gw, otherwise the worker may access freed memory (e.g. bat_priv). - If report_work is pending, the purge must cancel it and release the refe
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:456f341a790fe92a5738d35644cebb6775541808c3177342ba15d502bd70cc72
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/bridge_loop_avoidance.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ce2c0ee4d76d5ee4b391fe0e31334361e25030ec","status":"affected","version":"23721387c409087fd3b97e274f34d3ddc0970b74","versionType":"git"},{"lessThan":"3423a45e5c3d3c5129f88143a9a969787d7d5a0a","status":"affected","version":"23721387c409087fd3b97e274f34d3ddc0970b74","versionType":"git"},{"lessThan":"f1303adb1e59582f76c22798a2e2e150e054a9e7","status":"affected","version":"2372138…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/bridge_loop_avoidance.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.5"},{"lessThan":"3.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"sem…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/batman-adv/bridge_loop_avoidance.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ce2c0ee4d76d5ee4b391fe0e31334361e25030ec","status":"affected","version":"23721387c409087fd3b97e274f34d3ddc0970b74","versionType":"git"},{"lessThan":"3423a45e5c3d3c5129f88143a9a969787d7d5a0a","status":"affected","version":"23721387c409087fd3b97e274f34d3ddc0970b74","versionType":"git"},{"lessThan":"f1303adb1e59582f76c22798a2e2e150e054a9e7","status":"affected","version":"2372138…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/batman-adv/bridge_loop_avoidance.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.5"},{"lessThan":"3.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"sem…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0459430add32ea41f3e2ef9351610e6d33627a6b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/3423a45e5c3d3c5129f88143a9a969787d7d5a0a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/48663158222b3b7f6ee6791a67d512ede7fc94bb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/95a7034661274cf5985708bd2f6d86ee46f88fa9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/c6de1a5a9c406e30b91f1515a6ce05cc84023baa"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/ce2c0ee4d76d5ee4b391fe0e31334361e25030ec"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/eeddd7bab3d59c1e98642a204141f8c5d6194707"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/f1303adb1e59582f76c22798a2e2e150e054a9e7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4d40295924d0e15b33831a88bfc1ff404ca3a08973f42a1516c8c7f44aa13a2f · sha256:e9e73888782c9e55… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer