CVE-2026-23098
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/02/2026
Last modified:
04/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
netrom: fix double-free in nr_route_frame()<br />
<br />
In nr_route_frame(), old_skb is immediately freed without checking if<br />
nr_neigh->ax25 pointer is NULL. Therefore, if nr_neigh->ax25 is NULL,<br />
the caller function will free old_skb again, causing a double-free bug.<br />
<br />
Therefore, to prevent this, we need to modify it to check whether<br />
nr_neigh->ax25 is NULL before freeing old_skb.