Vulnerability in Linux

CVE-2026-23027

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() In kvm_ioctl_create_device(), kvm_device has allocated memory, kvm_device->destroy() seems to be supposed to free its kvm_device struct, but kvm_pch_pic_destroy() is not currently doing this, that would lead to a memory leak. So, fix it.

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions e785dfacf7e7fe94370fa0e8e3ff1bc8fe179831, 6.13, 0

References