CVE-2026-72295
Received Received - Intake

LoongArch KVM irqchip Index Validation Flaw

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chip array.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72295
EUVD
EUVD-2026-59194

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's KVM (Kernel-based Virtual Machine) implementation for LoongArch architecture. It involves a lack of validation for the irqchip index during irqfd (interrupt file descriptor) routing. This could allow an attacker to provide an out-of-range index, potentially leading to memory corruption or other security issues by accessing memory outside the intended routing table array.

Detection Guidance

This vulnerability affects the Linux kernel's KVM module for LoongArch architecture. Detection requires checking kernel logs for KVM-related errors or validating irqchip index handling in KVM operations. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow a malicious guest VM to cause a denial of service or execute arbitrary code on the host system. This could lead to unauthorized access, data breaches, or system crashes. Users running virtualized environments with LoongArch-based guests are most at risk.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements such as GDPR (data protection) or HIPAA (healthcare data privacy). Organizations must patch systems to avoid potential regulatory penalties and ensure data security.

Mitigation Strategies

Update the Linux kernel to the latest version that includes the fix for this vulnerability. Monitor kernel logs for KVM-related errors after applying the update.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72295. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart