CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the batman-adv module, specifically in the handling of multicast entries, leading to a use-after-free condition. This flaw allows concurrent RCU readers to access freed memory, potentially resulting in system crashes or arbitrary code execution. Organizations using Linux systems with the batman-adv module should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orig_node RCU release batadv_mcast_purge_orig() removes entries from RCU-protected hlists but does not wait for an RCU grace period before returning. Concurrent RCU readers may still accesses references to those entries at the point of removal. RCU-protected readers trying to operate on entries like orig->mcast_want_all_ipv6_node will then access already freed memory. Fix this by moving batadv_mcast_purge_orig() to batadv_orig_node_release(), just before the call_rcu() invocation. This ensures RCU readers that were active at purge time have drained before the orig_node memory is reclaimed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)