CVE-2026-31569

LoongArch: KVM: Handle the case that EIOINTC's coremap is empty

High · published April 24, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Handle the case that EIOINTC's coremap is empty

EIOINTC's coremap in eiointc_update_sw_coremap() can be empty, currently

we get a cpuid with -1 in this case, but we actually need 0 because it's

similar as the case that cpuid >= 4.

This fix an out-of-bounds access to kvm_arch::phyid_map::phys_map[].

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.6th percentile
Published
2026-04-24T14:35Z
EPSS history
Timeline
  • 24 APR 14:35Z
    LoongArch: KVM: Handle the case that EIOINTC's coremap is empty
    cvelistv5