CVE-2026-23033

Published Jan 31, 2026

Overview

CVE-2026-23033 is a known-severity vulnerability. It was published on January 31, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: omap-dma: fix dma_pool resource leak in error paths

The dma_pool created by dma_pool_create() is not destroyed when

dma_async_device_register() or of_dma_controller_register() fails,

causing a resource leak in the probe error paths.

Add dma_pool_destroy() in both error paths to properly release the

allocated dma_pool resource.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/2b29f38f4f9660595e8272b8e8b82ffcca7ce592 Ref git.kernel.org/stable/c/2e1136acf8a8887c29f52e35a77b537309af321f Ref git.kernel.org/stable/c/4b93712e96be17029bd22787f2e39feb0e73272c Ref git.kernel.org/stable/c/6b867a98699657c2a698bbc9e60656349b39b905 Ref git.kernel.org/stable/c/829b00481734dd54e72f755fd6584bce6fbffbb0 Ref git.kernel.org/stable/c/88a9483f093bbb9263dcf21bc7fdb5132e5de88d Ref git.kernel.org/stable/c/8d66cb05b8b76396387a7b3a91f9284225c87f04 Ref cert-portal.siemens.com/productcert/html/ssa-253495.html

Frequently Asked Questions

What is CVE-2026-23033?

CVE-2026-23033 is a known-severity vulnerability. It was published on January 31, 2026.

How severe is CVE-2026-23033?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-23033?

How can CyberStrike help with CVE-2026-23033?

CyberStrike's AI-powered security agents can automatically detect CVE-2026-23033 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.