CVE-2026-23098

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue was identified in the netrom network routing mechanism within the Linux kernel. Specifically, the nr route frame() function frees memory associated with old skb without verifying if the nr neigh->ax25 pointer is NULL. If nr neigh->ax25 is NULL, a subsequent free operation on old skb occurs, leading to a double-free condition. The issue is addressed by adding a check to ensure nr neigh->ax25 is not NULL before freeing old skb.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.