Unscored severity · published Jan 31, 2026
CVE-2026-23033
dmaengine: omap-dma: fix dma_pool resource leak in error paths
–
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: omap-dma: fix dma_pool resource leak in error paths
The dma_pool created by dma_pool_create() is not destroyed when
dma_async_device_register() or of_dma_controller_register() fails,
causing a resource leak in the probe error paths.
Add dma_pool_destroy() in both error paths to properly release the
allocated dma_pool resource.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
7bedaa5537604f34d1d63c5ec7891e559d2a61ed before 8d66cb05b8b76396387a7b3a91f9284225c87f04; 7bedaa5537604f34d1d63c5ec7891e559d2a61ed before 2b29f38f4f9660595e8272b8e8b82ffcca7ce592; 7bedaa5537604f34d1d63c5ec7891e559d2a61ed before 6b867a98699657c2a698bbc9e60656349b39b905; 7bedaa5537604f34d1d63c5ec7891e559d2a61ed before 88a9483f093bbb9263dcf21bc7fdb5132e5de88d; 7bedaa5537604f34d1d63c5ec7891e559d2a61ed before 4b93712e96be17029bd22787f2e39feb0e73272c; 7bedaa5537604f34d1d63c5ec7891e559d2a61ed before 829b00481734dd54e72f755fd6584bce6fbffbb0; +2 more · source: vendor
RR
RUGGEDCOM RST2428P · Siemens
before V4.0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-23033
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-23033
git.kernel.org
https://git.kernel.org/stable/c/2b29f38f4f9660595e8272b8e8b82ffcca7ce592
git.kernel.org
https://git.kernel.org/stable/c/2e1136acf8a8887c29f52e35a77b537309af321f
git.kernel.org
https://git.kernel.org/stable/c/4b93712e96be17029bd22787f2e39feb0e73272c
git.kernel.org
https://git.kernel.org/stable/c/6b867a98699657c2a698bbc9e60656349b39b905
git.kernel.org
https://git.kernel.org/stable/c/829b00481734dd54e72f755fd6584bce6fbffbb0
git.kernel.org
https://git.kernel.org/stable/c/88a9483f093bbb9263dcf21bc7fdb5132e5de88d
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
