CVE-2026-23098
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/02/2026
Última modificación:
04/02/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
netrom: fix double-free in nr_route_frame()<br />
<br />
In nr_route_frame(), old_skb is immediately freed without checking if<br />
nr_neigh->ax25 pointer is NULL. Therefore, if nr_neigh->ax25 is NULL,<br />
the caller function will free old_skb again, causing a double-free bug.<br />
<br />
Therefore, to prevent this, we need to modify it to check whether<br />
nr_neigh->ax25 is NULL before freeing old_skb.