CVE-2026-72294

HighCVSS 8.8

Published: 15/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

In the Linux kernel for LoongArch, the kvm_vcpu_ioctl_interrupt() function did not validate the IRQ number passed from userspace. Validation has been added to prevent potential issues.

Risk Assessment

Lack of validation could allow an unprivileged user to pass an invalid IRQ number, potentially leading to unexpected KVM behavior or system crash.

Recommendation

Apply the Linux kernel update containing this fix to ensure IRQ number validation in kvm_vcpu_ioctl_interrupt().

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function kvm_vcpu_ioctl_interrupt() can be called from userspace, here add irq validility cheking in kvm_vcpu_ioctl_interrupt().