VDB

DEBIAN-CVE-2026-23033

DEBIAN-CVE-2026-23033 PUBLISHED CVSS 9.300000190734863 CRITICAL

In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fix dma_pool resource leak in error paths The dma_pool created by dma_pool_create() is not destroyed when dma_async_device_register() or of_dma_controller_register() fails, causing a resource leak in the probe error paths. Add dma_pool_destroy() in both error paths to properly release the allocated dma_pool resource.

Risk Scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:11linux5.10.92-2, 5.10.92-1, 5.10.92-1
Debian:14linux6.18.1-1, 6.18.2-1, 6.18
Debian:13linux6.12.48-1, 6.12.63-1~bpo12+1, 6.12.69-1~bpo12+1
Debian:11linux-6.10, 6.1.112-1~deb11u1, 6.1.119-1~deb11u1
Debian:12linux6.1.119-1, 6.1.115-1, 6.1.112-1

Timeline

  • Jan 31, 2026 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›