CVE-2026-23098: netrom: fix double-free in nr_route_frame()
In the Linux kernel, the following vulnerability has been resolved:
netrom: fix double-free in nrrouteframe()
In nrrouteframe(), oldskb is immediately freed without checking if nrneigh->ax25 pointer is NULL. Therefore, if nrneigh->ax25 is NULL, the caller function will free oldskb again, causing a double-free bug.
Therefore, to prevent this, we need to modify it to check whether nrneigh->ax25 is NULL before freeing oldskb.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23098?
CVE-2026-23098 is classified with high severity due to its potential for causing application crashes and denial of service.
How do I fix CVE-2026-23098?
To fix CVE-2026-23098, update to the latest Linux kernel version that includes the patch for the double-free vulnerability.
What impact does CVE-2026-23098 have on systems?
CVE-2026-23098 can lead to potential crashes and instability in network-related functionalities of the Linux kernel.
Is CVE-2026-23098 exploitative in nature?
Yes, CVE-2026-23098 could potentially be exploited by attackers to crash systems or compromise network stability.
What versions of the Linux kernel are affected by CVE-2026-23098?
All versions of the Linux kernel prior to the application of the patch addressing CVE-2026-23098 are considered vulnerable.