[PATCH batadv 0/8] batman-adv: follow up fixes

From: Sven Eckelmann

Date: Sun May 03 2026 - 08:23:40 EST


While reviewing the fixes submitted to batman-adv in the recent weeks,
further problems in similar or adjecent code was identified. This was either
noticed in the manual review or reported by sashiko.dev.

Especially in the TT code, you have the global and the local translation
table. But when a bug was fixed, often only one of the two codepaths was
fixed. It was now tried to sync the TVLV preparation code between to of
them - not style wise but fixes wise. Besides the hardening, it will also
make the code less confusing.

The BLA and TP fixes are just some reference counting fixes - either
reference leak fixes or missing reference handling.

Signed-off-by: Sven Eckelmann <sven@xxxxxxxxxxxxx>
---
Sven Eckelmann (8):
batman-adv: tp_meter: fix tp_num leak on kmalloc failure
batman-adv: bla: prevent use-after-free when deleting claims
batman-adv: bla: only purge non-released claims
batman-adv: tt: fix negative tt_buff_len
batman-adv: tt: reject oversized local TVLV buffers
batman-adv: tt: fix TOCTOU race for reported vlans
batman-adv: tt: avoid empty VLAN responses
batman-adv: tt: prevent TVLV entry number overflow

net/batman-adv/bridge_loop_avoidance.c | 10 ++++++-
net/batman-adv/tp_meter.c | 5 +++-
net/batman-adv/translation-table.c | 55 +++++++++++++++++++++++++++-------
net/batman-adv/types.h | 2 +-
4 files changed, 58 insertions(+), 14 deletions(-)
---
base-commit: 3d3cf6a7314aca4df0a6dde28ce784a2a30d0166
change-id: 20260503-fixes-followup-064092b7ff55

Best regards,
--
Sven Eckelmann <sven@xxxxxxxxxxxxx>