The Linux kernel contained a double-free vulnerability in the netdev_nl_bind_rx_doit() function. The root cause was that genlmsg_reply() always consumes the skb, but the error handling path also called nlmsg_free(rsp), causing a double-free. The fix involved changing the error handling to propagate the error to the user instead of unbinding, aligning with typical genlmsg_reply() failure handling. This vulnerability is tracked as CVE-2026-53233 and is classified under CWE-415 (Double Free).

Successful exploitation of this vulnerability could lead to a double-free condition, potentially causing kernel crashes or arbitrary code execution with kernel privileges. The CVSS vector indicates local attack vector with low complexity and low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official advisories are provided, users should monitor official Linux kernel security advisories for updates addressing CVE-2026-53233. Until a patch is available, avoid actions that might trigger genlmsg_reply() failures such as invoking the kernel with an already-full receive buffer.