CVE-2026-63835

In the Linux kernel, the following vulnerability has been resolved:

batman-adv: v: prevent OGM aggregation on disabled hardif

When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface() -> ... -> batadvvogmifacedisable(). In this process, the skb aggrlist is also freed.

But batadvvogmsendmeshif() can still queue new skbs (via batadvvogmqueueonif()) to the aggrlist. This will only stop after all cores can no longer find the RCU protected list of hard interfaces. These queued skbs will never be freed or consumed by batadvvogmaggrwork.

The batadvvogmifacedisable() function must block batadvvogmqueueon_if() to avoid leak of skbs.