Linux · Linux Kernel · CVE-2023-26545
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.1.13
**Description**
The issue is related to a double free error in the MPLS mechanism of the Linux kernel, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of data. This error occurs upon an allocation failure during the renaming of a device, specifically when registering the sysctl table under a new location in net/mpls/af mpls.c.
**Recommendations**
For Linux kernel versions prior to 6.1.13, update to version 6.1.13 or later to resolve the issue.
As a temporary workaround, consider restricting access to the `net/mpls/af mpls.c` module to minimize the risk of exploitation.