CVE-2026-31558

kernel: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) component. A local attacker could potentially trigger an out-of-bounds memory access by providing a negative 'cpuid' parameter to the 'kvm_get_vcpu_by_cpuid()' function. This could lead to system instability or potentially other impacts due to memory corruption.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-839 · Numeric Range Comparison Without Minimum Check