Riskcovery

CVE-2026-31569

LoongArch: KVM: Handle the case that EIOINTC's coremap is empty

State
Published
Severity
7.3 High
Published
Apr 24, 2026
Updated
Aug 5, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Handle the case that EIOINTC's coremap is empty

EIOINTC's coremap in eiointc_update_sw_coremap() can be empty, currently we get a cpuid with -1 in this case, but we actually need 0 because it's similar as the case that cpuid >= 4.

This fix an out-of-bounds access to kvm_arch::phyid_map::phys_map[].

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3956a52bc05bd811082a3c9d2b423ee957e6fefc to before 126053d0a685bf1f2e98db8966386f38b2336338Affected
  • 3956a52bc05bd811082a3c9d2b423ee957e6fefc to before 2a0cbcd28ecf6e0b88fa498bebb94bd1be61a7c3Affected
  • 3956a52bc05bd811082a3c9d2b423ee957e6fefc to before b97bd69eb0f67b5f961b304d28e9ba45e202d841Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.21 through 6.18.*Not affected
  • 6.19.11 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.