Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function… (CVE-2026-72294)
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function kvm_vcpu_ioctl_interrupt() can be called from userspace, here add irq validility cheking in kvm_vcpu_ioctl_interrupt().
AI Analysis
Technical Summary
The Linux kernel's KVM subsystem for the LoongArch architecture contained a vulnerability in the kvm_vcpu_ioctl_interrupt() function, which is callable from userspace. The vulnerability stemmed from a lack of validation for IRQ values passed to this function. The issue was resolved by adding IRQ validity checking within kvm_vcpu_ioctl_interrupt(), preventing invalid IRQs from being processed.
Potential Impact
Without proper IRQ validity checks, there could be a risk of improper handling of interrupts within the KVM virtual CPU interface, potentially leading to kernel instability or other unintended behavior. However, specific impact details such as privilege escalation or denial of service are not provided in the available data.
Mitigation Recommendations
A fix has been applied to the Linux kernel to add IRQ validity checking in the kvm_vcpu_ioctl_interrupt() function. Users should update to a Linux kernel version that includes this fix once available. Patch status is not explicitly confirmed; check the vendor advisory or Linux kernel mailing lists for the exact fixed version and apply updates accordingly.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function… (CVE-2026-72294)
Description
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Function kvm_vcpu_ioctl_interrupt() can be called from userspace, here add irq validility cheking in kvm_vcpu_ioctl_interrupt().
CVSS v3.1
Score 8.8high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's KVM subsystem for the LoongArch architecture contained a vulnerability in the kvm_vcpu_ioctl_interrupt() function, which is callable from userspace. The vulnerability stemmed from a lack of validation for IRQ values passed to this function. The issue was resolved by adding IRQ validity checking within kvm_vcpu_ioctl_interrupt(), preventing invalid IRQs from being processed.
Potential Impact
Without proper IRQ validity checks, there could be a risk of improper handling of interrupts within the KVM virtual CPU interface, potentially leading to kernel instability or other unintended behavior. However, specific impact details such as privilege escalation or denial of service are not provided in the available data.
Mitigation Recommendations
A fix has been applied to the Linux kernel to add IRQ validity checking in the kvm_vcpu_ioctl_interrupt() function. Users should update to a Linux kernel version that includes this fix once available. Patch status is not explicitly confirmed; check the vendor advisory or Linux kernel mailing lists for the exact fixed version and apply updates accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-jxx3-rvf2-64xp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72294"]
Threat ID: 6a808b71bf8831d5394fc35f
Added to database: 08/15/2026, 15:53:21 UTC
Last enriched: 08/15/2026, 16:39:29 UTC
Last updated: 09/30/2026, 06:54:40 UTC
Views: 54
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.