CVE-2025-38366

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Check validity of "num_cpu" from user space

The maximum supported cpu number is EIOINTC_ROUTE_MAX_VCPUS about irqchip EIOINTC, here add validation about cpu number to avoid array pointer overflow.

This vulnerability does not affect Red Hat Enterprise Linux as the flaw is isolated to KVM virtualization on the LoongArch architecture. Red Hat does not support the LoongArch architecture, and the vulnerable code introduced in upstream kernel version 6.13 is not present in Red Hat Enterprise Linux kernels. As a result, supported Red Hat products are not impacted.