What’s Vulnerable › Vulnerabilities

CVE-2026-31558: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-24 · updated 2026-06-17
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust kvm_get_vcpu_by_cpuid() takes a cpuid parameter whose type is int, so cpuid can be negative. Let kvm_get_vcpu_by_cpuid() return NULL for this case so as to make it more robust. This fix an out-of-bounds access to kvm_arch::phyid_map::phys_map[].

Affected products

• Linux kernel: from 6.10.1 before 6.12.80; from 6.13 before 6.18.21; from 6.19 before 6.19.11; 6.10, 7.0-rc1, 7.0-rc2, 7.0-rc3, 7.0-rc4, 7.0-rc5 (+2) — fixed in 6.12.80, 6.18.21, 6.19.11

How to fix

Upgrade to a fixed version: Linux kernel 6.12.80, 6.18.21, 6.19.11. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2db06c15d8c7a0ccb6108524e16cd9163753f354
• https://git.kernel.org/stable/c/47857b05bd50db01e211a1b6f513d57901cd3e6b
• https://git.kernel.org/stable/c/596c3f8069c4792f22fce8c4452f44410032d910
• https://git.kernel.org/stable/c/878cf6acb4fd8ab4126cf9d369a5bb0e23123418

Get alerted when CVE-2026-31558 or the next vulnerability affects your stack