CVE-2026-53233
- Source
- https://cve.org/CVERecord?id=CVE-2026-53233
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53233.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-53233
- Downstream
- Published
- 2026-06-25T08:39:31.191Z
- Modified
- 2026-07-17T21:11:42.357398604Z
- Summary
- netdev: fix double-free in netdev_nl_bind_rx_doit()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
netdev: fix double-free in netdevnlbindrxdoit()
Sashiko flags that genlmsgreply() always consumes the skb. The error path calls nlmsgfree(rsp) so we can't jump directly to it. Let's not unbind, just propagate the error to the user. This is the typical way of handling genlmsg_reply() failures. They shouldn't happen unless user does something silly like calling the kernel with an already-full rcvbuf.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53233.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/9b019376cbee10c4f9184d1745fa37d156e36f30
- https://git.kernel.org/stable/c/c299321bc6232770ce378d6fa6bc46004d2d7fdb
- https://git.kernel.org/stable/c/c849de7d8757a7af801fc4a4058f71d481d367f2
- https://git.kernel.org/stable/c/e055ca9205d3eb6aec3e5fe4ecc18abbbf18c599
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53233.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-53233
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced170aafe35cb98e0f3fbacb446ea86389fbce22eaFixede055ca9205d3eb6aec3e5fe4ecc18abbbf18c599Fixedc299321bc6232770ce378d6fa6bc46004d2d7fdbFixed9b019376cbee10c4f9184d1745fa37d156e36f30Fixedc849de7d8757a7af801fc4a4058f71d481d367f2