CVE-2026-23027 — Missing Release of Memory after Effective Lifetime in Linux
7 documents6 sources
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 98.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 31
Description
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()
In kvm_ioctl_create_device(), kvm_device has allocated memory,
kvm_device->destroy() seems to be supposed to free its kvm_device
struct, but kvm_pch_pic_destroy() is not currently doing this, that
would lead to a memory leak.
So, fix it.
Affected Packages4 packages
▶CVEListV5linux/linuxe785dfacf7e7fe94370fa0e8e3ff1bc8fe179831 — fc53a66227af08d868face4b33fa8b2e1ba187ed+2
🔴Vulnerability Details
3GHSA▶
GHSA-fg32-8vpm-2j63: In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()
In kvm_ioctl_create↗2026-01-31
OSV▶
CVE-2026-23027: In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() In kvm_ioctl_create_d↗2026-01-31