]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
batman-adv: bla: reacquire gw address after skb realloc
authorSven Eckelmann <sven@narfation.org>
Sun, 28 Jun 2026 06:45:41 +0000 (08:45 +0200)
committerSven Eckelmann <sven@narfation.org>
Sun, 28 Jun 2026 07:58:34 +0000 (09:58 +0200)
commitcdf3b5af2bc4431e58629e8ad2086b1e9185c761
tree2a2403beaf12c9992cedf8fcddec6740253aa32f
parent48067b2ae4504500a7093d9e1e16b42e70330480
batman-adv: bla: reacquire gw address after skb realloc

The pskb_may_pull() called by batadv_bla_is_backbone_gw() could reallocate
the buffer behind the skb. Variables which were pointing to the old buffer
need to be reassigned to avoid an use-after-free.

Cc: stable@vger.kernel.org
Fixes: 9e794b6bf4a2 ("batman-adv: drop unicast packets from other backbone gw")
Signed-off-by: Sven Eckelmann <sven@narfation.org>
net/batman-adv/routing.c