CVE-2026-23029 — Missing Release of Memory after Effective Lifetime in Linux
7 documents6 sources
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 98.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 31
Description
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
In kvm_ioctl_create_device(), kvm_device has allocated memory,
kvm_device->destroy() seems to be supposed to free its kvm_device
struct, but kvm_eiointc_destroy() is not currently doing this, that
would lead to a memory leak.
So, fix it.
Affected Packages4 packages
▶CVEListV5linux/linux2e8b9df82631e714cc2b7bf302772c8259673180 — e94ec9661c5820d157d2cc4b6cf4a6ab656a7b4d+2
🔴Vulnerability Details
3GHSA▶
GHSA-6x37-w2qr-pm62: In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
In kvm_ioctl_create↗2026-01-31
OSV▶
CVE-2026-23029: In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() In kvm_ioctl_create_d↗2026-01-31