Riskcovery

CVE-2026-72294

LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()

State
Published
Severity
8.8 High
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()

Function kvm_vcpu_ioctl_interrupt() can be called from userspace, here add irq validility cheking in kvm_vcpu_ioctl_interrupt().

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f45ad5b8aa9335bc6b30331b739e778f2f730b35 to before 15469ba0284c7cc01c38493391e9e73b918833c4Affected
  • f45ad5b8aa9335bc6b30331b739e778f2f730b35 to before efe27b19a15c384cad7c80de399f3107ab070e6dAffected
  • f45ad5b8aa9335bc6b30331b739e778f2f730b35 to before d4574547e04a47ad498149576f65b84475ea6f4cAffected
  • f45ad5b8aa9335bc6b30331b739e778f2f730b35 to before 09b318ab77b7a4fc9987fd98d1525fc55ddc2617Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.