CVE-2026-31558

HIGH EPSS 2.9%
Published Apr 24, 20262mo ago · Modified Jun 17, 20261w ago
8.8 CVSS 3.1
High
Find Similar
Published Apr 24, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust kvm_get_vcpu_by_cpuid() takes a cpuid parameter whose type is int, so cpuid can be negative. Let kvm_get_vcpu_by_cpuid() return NULL for this case so as to make it more robust. This fix an out-of-bounds access to kvm_arch::phyid_map::phys_map[].

CVSS Details

Base Score
8.8
Exploitability
2.0
Impact
6.0
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Changed
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
2.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-125 Out-of-bounds Read Memory Safety

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥6.10.1  –  <6.12.80
linuxlinux_kernel*≥6.13  –  <6.18.21
linuxlinux_kernel*≥6.19  –  <6.19.11
linuxlinux_kernel6.10any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/2db06c15d8c7a0ccb6108524e16cd9163753f354
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/47857b05bd50db01e211a1b6f513d57901cd3e6b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/596c3f8069c4792f22fce8c4452f44410032d910
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/878cf6acb4fd8ab4126cf9d369a5bb0e23123418
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2db06c15d8c7a0ccb6108524e16cd9163753f354
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/47857b05bd50db01e211a1b6f513d57901cd3e6b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/596c3f8069c4792f22fce8c4452f44410032d910
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/878cf6acb4fd8ab4126cf9d369a5bb0e23123418
    Patch