CVE-2026-63835

Description

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadv_hardif_disable_interface() -> ... -> batadv_v_ogm_iface_disable(). In this process, the skb aggr_list is also freed. But batadv_v_ogm_send_meshif() can still queue new skbs (via batadv_v_ogm_queue_on_if()) to the aggr_list. This will only stop after all cores can no longer find the RCU protected list of hard interfaces. These queued skbs will never be freed or consumed by batadv_v_ogm_aggr_work. The batadv_v_ogm_iface_disable() function must block batadv_v_ogm_queue_on_if() to avoid leak of skbs.

Is your site exposed to CVE-2026-63835?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0017

Probability of exploitation

0.06%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/3d4548c96d6f21ac1a9b06c5f82f3ef439c87023 https://git.kernel.org/stable/c/86ab6b6fb5b82163bf6c45780bb72150021d7349 https://git.kernel.org/stable/c/97644fdaaf6446ffbe182c5eb804fceb5b1a51b7 https://git.kernel.org/stable/c/d11c00b95b2a3b3934007fc003dccc6fdcc061ad https://git.kernel.org/stable/c/d3569327fc7395b2b0461a0a0cb77a0bb74786c0 https://git.kernel.org/stable/c/d462ced79dd430200cf888984e8005da77fc810b https://git.kernel.org/stable/c/f04dde74399431fb07abbdd9cd5d0ed624771d04 https://git.kernel.org/stable/c/f79deaaf822ab0ee2424cf28781f9ab91576bea3

Frequently Asked Questions

What is CVE-2026-63835? +

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadv_hardif_disable_interface() -> ... -> batadv_v_ogm_iface_disable(). In this process, the skb aggr_list is also freed. But batadv_v_ogm_send_meshif() can still queue new skbs (via batadv_v_ogm_queue_on_if()) to the aggr_list. This will only stop after all cores can no longer find the RCU protected list of hard interfaces. These queued skbs will never be freed or consumed by batadv_v_ogm_aggr_work. The batadv_v_ogm_iface_disable() function must block batadv_v_ogm_queue_on_if() to avoid leak of skbs.

How do I check if I'm vulnerable to CVE-2026-63835? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.