CVE-2026-89910: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc

Published Sep 16, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc

Variable vector[] is declared on stack in function dmsintcinjectirq() and sometimes it is used without initialized. Here fix this issue.

Affected Software

1 affected component

Linux Linux kernel

Event History

Sep 16, 2026

CVE Published

via MITRE·10:32 AM

Data Sourced

via MITRE·10:32 AM

Description

Frequently Asked Questions

Which systems are exposed to this issue?

The issue is in the Linux kernel's LoongArch KVM code, specifically the dmsintc interrupt-injection path. Systems not using LoongArch KVM are not identified as affected by the provided information.

What condition triggers the vulnerability?

The issue occurs when dmsintc_inject_irq() uses the stack-allocated vector[] variable without it having been initialized in some execution paths. The provided information does not specify the external inputs or privileges needed to reach that path.

How can I determine whether my kernel includes the fix?

Check whether your kernel source or vendor patch set includes either referenced stable commit: f56060b0e10fa5633fac1dc243a25da3a5cdafb1 or 81aa3a58b542ed88819115c80a17acd86eacb89d. No fixed kernel version is provided.

CVE-2026-89910: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What condition triggers the vulnerability?

How can I determine whether my kernel includes the fix?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What condition triggers the vulnerability?

How can I determine whether my kernel includes the fix?