CVE-2026-23030 — Double Free in Linux
7 documents6 sources
Severity
—N/A
No vectorEPSS
0.0%
top 98.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 31
Description
In the Linux kernel, the following vulnerability has been resolved:
phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
The for_each_available_child_of_node() calls of_node_put() to
release child_np in each success loop. After breaking from the
loop with the child_np has been released, the code will jump to
the put_child label and will call the of_node_put() again if the
devm_request_threaded_irq() fails. These cause a double free bug.
Fix by returning directly to avoi…
Affected Packages5 packages
▶CVEListV5linux/linuxed2b5a8e6b98d042b323afbe177a5dc618921b31 — b97b2c9808c9a97e0ce30216fa12096d8b0eaa75+5
🔴Vulnerability Details
3OSV▶
CVE-2026-23030: In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() The fo↗2026-01-31
GHSA▶
GHSA-p937-325h-2j2f: In the Linux kernel, the following vulnerability has been resolved:
phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
The↗2026-01-31