Double Free Vulnerability in Linux Kernel's X.25 Networking Protocol

CVE-2026-43011

What is CVE-2026-43011?

A vulnerability exists in the Linux kernel related to the X.25 networking protocol, where improper error handling leads to a double free of socket buffers. Specifically, under certain conditions in the x25_queue_rx_frame function, if memory allocation for a socket buffer fails, it attempts to free the buffer again, leading to potential memory corruption. This flaw could be exploited to disrupt network functionality or cause a denial of service.

References