CVE-2026-89910

LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc

State
Published
Severity
7.3 High
Published
Sep 16, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc

Variable vector[] is declared on stack in function dmsintc_inject_irq() and sometimes it is used without initialized. Here fix this issue.

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:NLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 03de5eecb0f0f68f29086bc0075c7fd597bf4e4a to before f56060b0e10fa5633fac1dc243a25da3a5cdafb1Affected
  • 03de5eecb0f0f68f29086bc0075c7fd597bf4e4a to before 81aa3a58b542ed88819115c80a17acd86eacb89dAffected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 7.2.5 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.