What’s Vulnerable › Vulnerabilities

CVE-2026-72294: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function kvm_vcpu_ioctl_interrupt() can be called from userspace, here add irq validility cheking in kvm_vcpu_ioctl_interrupt().

Affected products

• Linux kernel: 6.7 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/09b318ab77b7a4fc9987fd98d1525fc55ddc2617
• https://git.kernel.org/stable/c/15469ba0284c7cc01c38493391e9e73b918833c4
• https://git.kernel.org/stable/c/d4574547e04a47ad498149576f65b84475ea6f4c
• https://git.kernel.org/stable/c/efe27b19a15c384cad7c80de399f3107ab070e6d

Get alerted when CVE-2026-72294 or the next vulnerability affects your stack