PT-2026-52328 · Linux · Linux

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-53233

Mitre

In the Linux kernel, the following vulnerability has been resolved:

netdev: fix double-free in netdev nl bind rx doit()

Sashiko flags that genlmsg reply() always consumes the skb. The error path calls nlmsg free(rsp) so we can't jump directly to it. Let's not unbind, just propagate the error to the user. This is the typical way of handling genlmsg reply() failures. They shouldn't happen unless user does something silly like calling the kernel with an already-full rcvbuf.

Identificadores relacionados

CVE-2026-53233

Produtos afetados

Linux

Referências · 5

• https://git.kernel.org/stable/c/c849de7d8757a7af801fc4a4058f71d481d367f2 · Nota
• https://git.kernel.org/stable/c/c299321bc6232770ce378d6fa6bc46004d2d7fdb · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-53233 · Nota de Segurança
• https://git.kernel.org/stable/c/e055ca9205d3eb6aec3e5fe4ecc18abbbf18c599 · Nota
• https://git.kernel.org/stable/c/9b019376cbee10c4f9184d1745fa37d156e36f30 · Nota