]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
authorQiang Ma <maqianga@uniontech.com>
Sat, 17 Jan 2026 02:57:02 +0000 (10:57 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 23 Jan 2026 10:21:32 +0000 (11:21 +0100)
commit 7d8553fc75aefa7ec936af0cf8443ff90b51732e upstream.

In kvm_ioctl_create_device(), kvm_device has allocated memory,
kvm_device->destroy() seems to be supposed to free its kvm_device
struct, but kvm_eiointc_destroy() is not currently doing this, that
would lead to a memory leak.

So, fix it.

Cc: stable@vger.kernel.org
Reviewed-by: Bibo Mao <maobibo@loongson.cn>
Signed-off-by: Qiang Ma <maqianga@uniontech.com>
Signed-off-by: Huacai Chen <chenhuacai@loongson.cn>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
arch/loongarch/kvm/intc/eiointc.c

index a1cc116b4dacebf597ab7b82c7e4938396a8f913..945ce4ed7e0b7e2cd9ee20d36808f3a8f481658d 100644 (file)
@@ -679,6 +679,7 @@ static void kvm_eiointc_destroy(struct kvm_device *dev)
        kvm_io_bus_unregister_dev(kvm, KVM_IOCSR_BUS, &eiointc->device);
        kvm_io_bus_unregister_dev(kvm, KVM_IOCSR_BUS, &eiointc->device_vext);
        kfree(eiointc);
+       kfree(dev);
 }
 
 static struct kvm_device_ops kvm_eiointc_dev_ops = {