References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: stop tp_meter sessions during mesh teardown

TP meter sessions remain linked on bat_priv->tp_list after the netlink
request has already finished. When the mesh interface is removed,
batadv_mesh_free() currently tears down the mesh without first draining
these sessions.

A running sender thread or a late incoming tp_meter packet can then keep
processing against a mesh instance which is already shutting down.
Synchronize tp_meter with the mesh lifetime by stopping all active
sessions from batadv_mesh_free() and waiting for sender threads to exit
before teardown continues.

https://git.kernel.org/stable/c/03660dab86f93319178a24667f6998526dc4355d

https://git.kernel.org/stable/c/26dfeee8db81354bfdade155f27f9e16510ad196

https://git.kernel.org/stable/c/3d3cf6a7314aca4df0a6dde28ce784a2a30d0166

https://git.kernel.org/stable/c/79bc0eaeef2c5797317bf2da8e3159a74d62ec47

https://git.kernel.org/stable/c/8634c1dbd73adb74d40533ebb7e914efb82e71fb