Homepage

CVE-2026-23030 Affecting kernel-uek-debug-modules-wireless package, versions <0:6.12.0-109.67.6.el10uek

Severity

 Recommended
high

Based on Oracle Linux security rating.

Threat Intelligence

EPSS
0.01% (2nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ORACLE10-KERNELUEKDEBUGMODULESWIRELESS-15469641
  • published12 Mar 2026
  • disclosed31 Jan 2026
Report a new vulnerability Found a mistake?

Introduced: 31 Jan 2026

CVE-2026-23030  (opens in a new tab)

How to fix?

Upgrade Oracle:10 kernel-uek-debug-modules-wireless to version 0:6.12.0-109.67.6.el10uek or higher.
This issue was patched in ELSA-2026-50144.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-uek-debug-modules-wireless package and not the kernel-uek-debug-modules-wireless package as distributed by Oracle. See How to fix? for Oracle:10 relevant fixed versions and status.

In the Linux kernel, the following vulnerability has been resolved:

phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()

The for_each_available_child_of_node() calls of_node_put() to release child_np in each success loop. After breaking from the loop with the child_np has been released, the code will jump to the put_child label and will call the of_node_put() again if the devm_request_threaded_irq() fails. These cause a double free bug.

Fix by returning directly to avoid the duplicate of_node_put().