PT-2026-52328 · Linux · Linux

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-53233

Mitre

In the Linux kernel, the following vulnerability has been resolved:

netdev: fix double-free in netdev nl bind rx doit()

Sashiko flags that genlmsg reply() always consumes the skb. The error path calls nlmsg free(rsp) so we can't jump directly to it. Let's not unbind, just propagate the error to the user. This is the typical way of handling genlmsg reply() failures. They shouldn't happen unless user does something silly like calling the kernel with an already-full rcvbuf.

Related Identifiers

CVE-2026-53233

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-53233 · Security Note
• https://git.kernel.org/stable/c/c849de7d8757a7af801fc4a4058f71d481d367f2 · Note
• https://git.kernel.org/stable/c/c299321bc6232770ce378d6fa6bc46004d2d7fdb · Note
• https://git.kernel.org/stable/c/e055ca9205d3eb6aec3e5fe4ecc18abbbf18c599 · Note
• https://git.kernel.org/stable/c/9b019376cbee10c4f9184d1745fa37d156e36f30 · Note