PT-2026-5533 · Linux+2 · Linux Kernel+2

Published 2026-01-01 · Updated 2026-05-22 · CVE-2026-23030

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the rockchip usb2phy probe() function related to a double free issue. The issue occurs due to multiple calls to of node put() which releases node pointers, leading to a double free when devm request threaded irq() fails. This flaw is present in the phy: rockchip: inno-usb2 component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2026-04384

CVE-2026-23030

ECHO-C605-4F93-35FC

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:1573-1

SUSE-SU-2026:1661-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21114-1

SUSE-SU-2026:21123-1

SUSE-SU-2026:21255-1

SUSE-SU-2026:21284-1

USN-8278-1

USN-8289-1

USN-8296-1

Affected Products

Linux Kernel

Ubuntu

Rockchip

References · 735

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23030.json · Exploit
• https://ubuntu.com/security/CVE-2026-23020 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23093 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21114-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31504 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23148 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22991 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23131 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23256 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71186 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40149 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8278-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43078 · Vendor Advisory