CVE-2026-89907

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate MSI data before routing it to EIOINTC pch_msi_set_irq() passes e->msi.data straight into eiointc_set_irq() as the irq number. The MSI data comes from userspace, that either via a KVM_IRQ_ROUTING_MSI entry set with KVM_SET_GSI_ROUTING (used by irqfd and KVM_IRQ_LINE) or directly via KVM_SIGNAL_MSI, and is never checked against EIOINTC_IRQS. eiointc_set_irq() uses the value with __set_bit()/__clear_bit() on the 256-bit isr bitmap, eiointc_update_irq() then indexes sw_coremap[] and the per-cpu coreisr/sw_coreisr bitmaps with it. Therefore a data value >= 256 reads and writes memory past the end of those arrays, i.e. any process holding a VM fd can corrupt kernel memory beyond the allocation of loongarch_eiointc. Reject MSI data that doesn't fit in the EIOINTC irq space. The DMSINTC path is unaffected as it decodes the vector from the address and masks it.

• https://git.kernel.org/stable/c/501514d6ebd2111c353a1296f25dbe22fbd64657
• https://git.kernel.org/stable/c/83715a40a2d30d23719e0b25380ba82ff905195b

Published

Sep 16, 2026

Last Modified

Sep 16, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-89901In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89902In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-89903In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-89904In the Linux kernel, the following vulnerability has been re…8.4
• CVE-2026-89905In the Linux kernel, the following vulnerability has been re…
• CVE-2026-89906In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-89908In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-89909In the Linux kernel, the following vulnerability has been re…
• CVE-2026-8991The Drag and Drop Multiple File Upload for Contact Form 7 pl…4.4
• CVE-2026-89910In the Linux kernel, the following vulnerability has been re…7.3
• CVE-2026-89911In the Linux kernel, the following vulnerability has been re…7.9
• CVE-2026-89912In the Linux kernel, the following vulnerability has been re…7.1