CVE-2026-23030

Published Jan 31, 2026

Overview

CVE-2026-23030 is a known-severity vulnerability. It was published on January 31, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()

The for_each_available_child_of_node() calls of_node_put() to

release child_np in each success loop. After breaking from the

loop with the child_np has been released, the code will jump to

the put_child label and will call the of_node_put() again if the

devm_request_threaded_irq() fails. These cause a double free bug.

Fix by returning directly to avoid the duplicate of_node_put().

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/027d42b97e6eb827c3438ebc09bab7efaee9270d Ref git.kernel.org/stable/c/b97b2c9808c9a97e0ce30216fa12096d8b0eaa75 Ref git.kernel.org/stable/c/e07dea3de508cd6950c937cec42de7603190e1ca Ref git.kernel.org/stable/c/ebae26dd15140b840cf65be5e1c0daee949ba70b Ref git.kernel.org/stable/c/efe92ee7a111fe0f4d75f3ed6b7e3f86322279d5 Ref cert-portal.siemens.com/productcert/html/ssa-253495.html

Frequently Asked Questions

What is CVE-2026-23030?

CVE-2026-23030 is a known-severity vulnerability. It was published on January 31, 2026.

How severe is CVE-2026-23030?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-23030?

How can CyberStrike help with CVE-2026-23030?

CyberStrike's AI-powered security agents can automatically detect CVE-2026-23030 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.