Vulnerability in Linux

CVE-2026-23028

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() In kvm_ioctl_create_device(), kvm_device has allocated memory, kvm_device->destroy() seems to be supposed to free its kvm_device struct, but kvm_ipi_destroy() is not currently doing this, that would lead to a memory leak. So, fix it.

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions c532de5a67a70f8533d495f8f2aaa9a0491c3ad0, 6.13, 0

References