CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Linux.
CVE
CVE-2026-23098
Severity
HIGH
CVSS
8.8
EPSS
0.18%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: netrom: fix double-free in nr_route_frame() In nr_route_frame(), old_skb is immediately freed without checking if nr_neigh->ax25 pointer is NULL. Therefore, if nr_neigh->ax25 is NULL, the caller function will free old_skb again, causing a double-free bug. Therefore, to prevent this, we need to modify it to check whether nr_neigh->ax25 is NULL before freeing old_skb.
Related CVEs
Other vulnerabilities affecting the same vendor(s)