In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.
No PoCs from references.
- https://github.com/anonymous-1113/CPE_verify