CVE-2026-23098
Published: Feb 4, 2026
Modified: May 11, 2026
CVSS v3.1
8.8
Description
In the Linux kernel, the following vulnerability has been resolved: netrom: fix double-free in nr_route_frame() In nr_route_frame(), old_skb is immediately freed without checking if nr_neigh->ax25 pointer is NULL. Therefore, if nr_neigh->ax25 is NULL, the caller function will free old_skb again, causing a double-free bug. Therefore, to prevent this, we need to modify it to check whether nr_neigh->ax25 is NULL before freeing old_skb.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 25aab6bfc31017a7e52035b99aef5c2b6bde8ffbaffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 6e0110ea90313b7c0558a0b77038274a6821caf8affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 7c48fdf2d1349bb54815b56fb012b9d577707708affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < bd8955337e3764f912f49b360e176d8aaecf7016affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 94d1a8bd08af1f4cc345c5c29f5db1ea72b8bb8c+2 more versions |
Linux | Linux | affected 2.6.12unaffected 0 - < 2.6.12unaffected 5.10.249 - <= 5.10.*unaffected 5.15.199 - <= 5.15.*unaffected 6.1.162 - <= 6.1.*+4 more versions |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now