CVE-2026-43011
Awaiting Analysis Awaiting Analysis - Queue
Double Free in Linux Kernel X.25 Protocol

Publication date: 2026-05-01

Last updated on: 2026-05-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it calls kfree_skb(skb) at line 48 and returns 1 (error). This error propagates back through the call chain: x25_queue_rx_frame returns 1 | v x25_state3_machine receives the return value 1 and takes the else branch at line 278, setting queued=0 and returning 0 | v x25_process_rx_frame returns queued=0 | v x25_backlog_rcv at line 452 sees queued=0 and calls kfree_skb(skb) again This would free the same skb twice. Looking at x25_backlog_rcv: net/x25/x25_in.c:x25_backlog_rcv() { ... queued = x25_process_rx_frame(sk, skb); ... if (!queued) kfree_skb(skb); }
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-01
Last Modified
2026-05-03
Generated
2026-05-07
AI Q&A
2026-05-01
EPSS Evaluated
2026-05-05
NVD
CVE-2026-43011
EUVD
EUVD-2026-26610
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a potential double free issue in the Linux kernel's X.25 networking code. Specifically, when the function alloc_skb fails in x25_queue_rx_frame, it frees a socket buffer (skb) and returns an error. However, this error causes the skb to be freed again later in the call chain by x25_backlog_rcv, resulting in the same skb being freed twice.

Double freeing memory can lead to undefined behavior, including memory corruption or crashes.


How can this vulnerability impact me? :

The double free vulnerability can cause instability in the Linux kernel, potentially leading to system crashes or memory corruption. This can affect the reliability and availability of systems running vulnerable versions of the Linux kernel, especially those using the X.25 networking protocol.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart