OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89910

HIGH · CVSS 7.3 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's KVM implementation on LoongArch architecture, where an uninitialized stack variable in the `dmsintc_inject_irq()` function could lead to unpredictable behavior or potential information leakage. Organizations utilizing Linux systems with KVM on LoongArch should prioritize this fix to mitigate risks associated with uninitialized memory access.

CVE
CVE-2026-89910
Severity
HIGH
CVSS
7.3
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector[] is declared on stack in function dmsintc_inject_irq() and sometimes it is used without initialized. Here fix this issue.