In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets… (CVE-2026-63835)
A vulnerability in the Linux kernel's batman-adv component could lead to a memory leak when an interface is disabled. Specifically, the system fails to block new packet buffers (skbs) from being queued on a disabled interface, causing these buffers to never be freed or processed. This issue has been resolved by ensuring that queuing is blocked when the interface is disabled.
AI Analysis
Technical Summary
The Linux kernel's batman-adv module had a flaw where, after disabling a network interface, the function batadv_v_ogm_send_meshif() could still queue new skbs to the aggregation list. Since the aggregation list is freed during interface disablement, these newly queued skbs are neither freed nor consumed, resulting in a memory leak. The fix involves blocking the queuing function batadv_v_ogm_queue_on_if() during interface disablement to prevent this leak.
Potential Impact
This vulnerability causes a resource leak (memory leak) in the Linux kernel's batman-adv networking component when interfaces are disabled. While it does not directly indicate code execution or denial of service, the leak could degrade system performance or stability over time if exploited.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets… (CVE-2026-63835)
Description
A vulnerability in the Linux kernel's batman-adv component could lead to a memory leak when an interface is disabled. Specifically, the system fails to block new packet buffers (skbs) from being queued on a disabled interface, causing these buffers to never be freed or processed. This issue has been resolved by ensuring that queuing is blocked when the interface is disabled.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's batman-adv module had a flaw where, after disabling a network interface, the function batadv_v_ogm_send_meshif() could still queue new skbs to the aggregation list. Since the aggregation list is freed during interface disablement, these newly queued skbs are neither freed nor consumed, resulting in a memory leak. The fix involves blocking the queuing function batadv_v_ogm_queue_on_if() during interface disablement to prevent this leak.
Potential Impact
This vulnerability causes a resource leak (memory leak) in the Linux kernel's batman-adv networking component when interfaces are disabled. While it does not directly indicate code execution or denial of service, the leak could degrade system performance or stability over time if exploited.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-vcwj-xjx6-gq5q
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-63835"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27ad2a4a8d5989131236
Added to database: 07/19/2026, 19:38:21 UTC
Last enriched: 07/19/2026, 20:17:55 UTC
Last updated: 07/20/2026, 11:41:11 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.