CVE-2026-23028: LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix kvmdevice leak in kvmipidestroy()
In kvmioctlcreatedevice(), kvmdevice has allocated memory, kvmdevice->destroy() seems to be supposed to free its kvmdevice struct, but kvmipidestroy() is not currently doing this, that would lead to a memory leak.
So, fix it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23028?
CVE-2026-23028 has been classified as a medium severity vulnerability.
How do I fix CVE-2026-23028?
To fix CVE-2026-23028, update the Linux kernel to the latest version that includes the patch for this vulnerability.
What is the impact of CVE-2026-23028?
The impact of CVE-2026-23028 includes a potential memory leak in the KVM device management of the Linux kernel.
Who is affected by CVE-2026-23028?
CVE-2026-23028 affects users and systems running vulnerable versions of the Linux kernel using KVM virtualization.
When was CVE-2026-23028 published?
CVE-2026-23028 was published in the CVE database in October 2026.