OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89906

HIGH · CVSS 7.8 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's BPF implementation on LoongArch architecture, where improper calculation of jump offsets can result in incorrect branch offsets and potential soft lockups during JIT compilation. This issue could lead to system instability and degraded performance, particularly under heavy load or complex execution scenarios. Organizations using Linux on LoongArch should prioritize addressing this vulnerability to ensure system reliability and performance.

CVE
CVE-2026-89906
Severity
HIGH
CVSS
7.8
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calculation in tail call The old macro-based jmp_offset calculation derives the jump distance from a stale prior-pass code stride, which can lead to wrong branch offsets and soft lockups under extra JIT passes. Fix this by calculating the offset directly on the absolute target: "ctx->offset[insn + 1] - ctx->idx". To avoid a false 16-bit range check abort during size estimation, add a "ctx->image == NULL" guard to inject a safe dummy offset.