CVE-2026-23027: LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix kvmdevice leak in kvmpchpicdestroy()
In kvmioctlcreatedevice(), kvmdevice has allocated memory, kvmdevice->destroy() seems to be supposed to free its kvmdevice struct, but kvmpchpicdestroy() is not currently doing this, that would lead to a memory leak.
So, fix it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23027?
The severity of CVE-2026-23027 is classified as moderate due to the potential for memory leaks in the KVM subsystem.
How do I fix CVE-2026-23027?
To fix CVE-2026-23027, update your Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2026-23027?
CVE-2026-23027 affects systems utilizing the Linux kernel with KVM support, particularly on LoongArch architecture.
When was CVE-2026-23027 discovered?
CVE-2026-23027 was disclosed in 2026 and has since been resolved in subsequent kernel updates.
Is CVE-2026-23027 related to other CVEs?
While CVE-2026-23027 specifically addresses a kvm_device memory leak, it is important to review related KVM vulnerability disclosures for comprehensive security management.