{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-64218",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-64218",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-07-24T15:23:05.814Z",
    "updatedAt": "2026-08-05T12:40:06.269Z",
    "importedAt": "2026-10-24T01:58:25.636Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "batman-adv: bla: fix report_work leak on backbone_gw purge",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: bla: fix report_work leak on backbone_gw purge\n\nbatadv_bla_purge_backbone_gw() removes stale backbone gateway entries,\nbut fails to properly handle their associated report_work:\n\n- If report_work is running, the purge must wait for it to finish before\n  freeing the backbone_gw, otherwise the worker may access freed memory\n  (e.g. bat_priv).\n- If report_work is pending, the purge must cancel it and release the\n  reference held for that pending work item.\n\nThe previous implementation called hlist_for_each_entry_safe() inside a\nspin_lock_bh() section, but cancel_work_sync() may sleep and therefore\ncannot be called from within a spinlock-protected region.\n\nRestructure the loop to handle one entry per spinlock critical section:\nacquire the lock, find the next entry to purge, remove it from the hash\nlist, then release the lock before calling cancel_work_sync() and\ndropping the hash_entry reference. Repeat until no more entries require\npurging.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "23721387c409087fd3b97e274f34d3ddc0970b74",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ce2c0ee4d76d5ee4b391fe0e31334361e25030ec"
            },
            {
              "version": "23721387c409087fd3b97e274f34d3ddc0970b74",
              "status": "affected",
              "versionType": "git",
              "lessThan": "3423a45e5c3d3c5129f88143a9a969787d7d5a0a"
            },
            {
              "version": "23721387c409087fd3b97e274f34d3ddc0970b74",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f1303adb1e59582f76c22798a2e2e150e054a9e7"
            },
            {
              "version": "23721387c409087fd3b97e274f34d3ddc0970b74",
              "status": "affected",
              "versionType": "git",
              "lessThan": "48663158222b3b7f6ee6791a67d512ede7fc94bb"
            },
            {
              "version": "23721387c409087fd3b97e274f34d3ddc0970b74",
              "status": "affected",
              "versionType": "git",
              "lessThan": "eeddd7bab3d59c1e98642a204141f8c5d6194707"
            },
            {
              "version": "23721387c409087fd3b97e274f34d3ddc0970b74",
              "status": "affected",
              "versionType": "git",
              "lessThan": "c6de1a5a9c406e30b91f1515a6ce05cc84023baa"
            },
            {
              "version": "23721387c409087fd3b97e274f34d3ddc0970b74",
              "status": "affected",
              "versionType": "git",
              "lessThan": "95a7034661274cf5985708bd2f6d86ee46f88fa9"
            },
            {
              "version": "23721387c409087fd3b97e274f34d3ddc0970b74",
              "status": "affected",
              "versionType": "git",
              "lessThan": "0459430add32ea41f3e2ef9351610e6d33627a6b"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.5",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.5"
            },
            {
              "version": "5.10.258",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.209",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.175",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.142",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.92",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.34",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "7.0.11",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.0.*"
            },
            {
              "version": "7.1",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}