CVE-2026-23033: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fix dma_pool resource leak in error paths The dma_pool created by dma_pool_create() is not destroyed when dma_async_device_register() or of_dma_controller_register() fails, causing a resource leak in the probe error paths. Add dma_pool_destroy() in both error paths to properly release the allocated dma_pool resource.

Affected products

• Linux Linux: from 3.6, before 5.10.249 (fixed in 5.10.249); from 5.11, before 5.15.199 (fixed in 5.15.199); from 5.16, before 6.1.162 (fixed in 6.1.162); from 6.2, before 6.6.122 (fixed in 6.6.122); from 6.7, before 6.12.67 (fixed in 6.12.67); from 6.13, before 6.18.7 (fixed in 6.18.7)
• Siemens Ruggedcom RST2428P: before V4.0 (fixed in V4.0)

Published 2026-01-31. Last modified 2026-06-17.