CVE-2025-21823

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel's batman-adv module has been resolved. The issue was related to the ELP metric worker, which calculates new metric values for all neighbors "reachable" over an interface. The problem arose because some metric sources required locks that might need to sleep, which is incompatible with the RCU list iterator used for the recorded neighbors. This could lead to potential invalid memory accesses. The vulnerability was resolved by getting rid of the per interface neighbor metric worker and handling everything in the interface worker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.