Riskcovery

CVE-2026-23028

LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()

State
Published
Severity
Not scored
Published
Jan 31, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()

In kvm_ioctl_create_device(), kvm_device has allocated memory, kvm_device->destroy() seems to be supposed to free its kvm_device struct, but kvm_ipi_destroy() is not currently doing this, that would lead to a memory leak.

So, fix it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c532de5a67a70f8533d495f8f2aaa9a0491c3ad0 to before 5defcc2f9c22e6e09b5be68234ad10f4ba0292b7Affected
  • c532de5a67a70f8533d495f8f2aaa9a0491c3ad0 to before 0bf58cb7288a4d3de6d8ecbb3a65928a9362bf21Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.7 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.