Vulnerability in Linux

CVE-2026-23029

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() In kvm_ioctl_create_device(), kvm_device has allocated memory, kvm_device->destroy() seems to be supposed to free its kvm_device struct, but kvm_eiointc_destroy() is not currently doing this, that would lead to a memory leak. So, fix it.

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 2e8b9df82631e714cc2b7bf302772c8259673180, 6.13, 0

References