Linux kernel bug fix: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
Subsystem: kvm (virt/kvm/guest_memfd.c)
Bug type: use-after-free, severity: high
Keywords: refcount;use after free
Files changed: virt/kvm/guest_memfd.c
Introduced by Sean Christopherson on 2023-11-14 08:01:03 -0500; fixed by Sean Christopherson on 2025-11-04 09:16:53 -0800 (lifetime: 721 days)