PT-2026-5533
CVE-2026-23030
·
Published
2026-01-01
·
Updated
2026-10-18
Description by
CVSS 2.0
7.7
HighMetricsAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the rockchip usb2phy probe() function related to a double free issue. The issue occurs due to multiple calls to
of node put() which releases node pointers, leading to a double free when devm request threaded irq() fails. This flaw is present in the phy: rockchip: inno-usb2 component.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾