What’s Vulnerable › Vulnerabilities

CVE-2026-31564: LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access() In function kvm_eiointc_regs_access(), the register base address is caculated from array base address plus offset, the offset is absolute value from the base address. The data type of array base address is u64, it should be converted into the "void *" type and then plus the offset.

Affected products

• Linux kernel: from 6.19.1 before 6.19.11; 6.19, 7.0-rc1, 7.0-rc2, 7.0-rc3, 7.0-rc4, 7.0-rc5 (+2) — fixed in 6.19.11

How to fix

Upgrade to a fixed version: Linux kernel 6.19.11. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/6bcfb7f46d667b04bd1a1169ccedf5fb699c60df
• https://git.kernel.org/stable/c/c4f0a9481cf0dd7c71a07484bc98f2570fdb3a82

Get alerted when CVE-2026-31564 or the next vulnerability affects your stack