CVE-2026-23029: LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix kvmdevice leak in kvmeiointcdestroy()
In kvmioctlcreatedevice(), kvmdevice has allocated memory, kvmdevice->destroy() seems to be supposed to free its kvmdevice struct, but kvmeiointcdestroy() is not currently doing this, that would lead to a memory leak.
So, fix it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23029?
The severity of CVE-2026-23029 is considered to be medium due to the potential for memory leaks affecting system stability.
How do I fix CVE-2026-23029?
To fix CVE-2026-23029, you should apply the latest kernel updates that contain the patches addressing the KVM device memory leak.
Which versions of the Linux kernel are affected by CVE-2026-23029?
CVE-2026-23029 affects certain versions of the Linux kernel that utilize KVM on LoongArch architecture.
What are the potential impacts of CVE-2026-23029?
The potential impacts of CVE-2026-23029 include increased system resource usage and possible performance degradation.
Is CVE-2026-23029 still a risk if my system is updated?
If your system is updated with the patches provided for CVE-2026-23029, the risk should be mitigated.