CVE-2026-23028

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() In kvm_ioctl_create_device(), kvm_device has allocated memory, kvm_device->destroy() seems to be supposed to free its kvm_device struct, but kvm_ipi_destroy() is not currently doing this, that would lead to a memory leak. So, fix it.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedJan 31, 2026
First seenJan 31, 2026

How to fix

Update
  • Linux Linux5defcc2f9c22e6e09b5be68234ad10f4ba0292b7, 0bf58cb7288a4d3de6d8ecbb3a65928a9362bf21 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxc532de5a67a70f8533d495f8f2aaa9a0491c3ad0 ≤ v < 5defcc2f9c22e6e09b5be68234ad10f4ba0292b7, c532de5a67a70f8533d495f8f2aaa9a0491c3ad0 ≤ v < 0bf58cb7288a4d3de6d8ecbb3a65928a9362bf21, 6.135defcc2f9c22e6e09b5be68234ad10f4ba0292b7, 0bf58cb7288a4d3de6d8ecbb3a65928a9362bf21

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.