CVE-2026-31564
Description
A flaw was found in the Linux kernel, specifically within the Kernel-based Virtual Machine (KVM) component for LoongArch architecture. An incorrect base address calculation in the kvm_eiointc_regs_access() function, where a u64 type was not properly converted to a void * before adding an offset, could lead to memory corruption. This vulnerability may allow a local attacker to access or modify unintended memory regions, potentially resulting in information disclosure or denial of service.
Understanding the Weakness (CWE)
Other,Integrity
Technical Impact: Unexpected State; Quality Degradation
The program could wind up using the wrong number and generate incorrect results. If the number is used to allocate resources or make a security decision, then this could introduce a vulnerability.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
