BaseFortify

Publication date: 2026-01-31

Last updated on: 2026-06-02

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fix dma_pool resource leak in error paths The dma_pool created by dma_pool_create() is not destroyed when dma_async_device_register() or of_dma_controller_register() fails, causing a resource leak in the probe error paths. Add dma_pool_destroy() in both error paths to properly release the allocated dma_pool resource.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-31

Last Modified

2026-06-02

Generated

2026-07-06

AI Q&A

2026-01-31

EPSS Evaluated

2026-07-05

NVD

CVE-2026-23033

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a resource leak in the Linux kernel's dmaengine subsystem, specifically in the omap-dma driver. When certain functions (dma_async_device_register() or of_dma_controller_register()) fail during device initialization, the allocated dma_pool resource is not properly destroyed, leading to a resource leak. The fix involves adding dma_pool_destroy() calls in the error paths to release the allocated resources correctly.

Impact Analysis

This vulnerability can cause resource leaks in the Linux kernel, which may lead to increased memory usage or depletion of DMA pool resources over time. This could potentially degrade system performance or stability, especially in systems that frequently encounter these error conditions during device initialization.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for the dma_pool resource leak in the omap-dma driver. The fix involves adding dma_pool_destroy() in error paths to properly release allocated dma_pool resources, preventing resource leaks.

Hi! I’m here to help you understand CVE-2026-23033. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70