Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38366

LoongArch: KVM: Check validity of "num_cpu" from user space

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "num_cpu" from user space The maximum supported cpu number is EIOINTC_ROUTE_MAX_VCPUS about irqchip EIOINTC, here add validation about cpu number to avoid array pointer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1ad7efa552fd5cf4e8c49fea863c5c6a5dcf9f00 to < a3293b4078ee93174f70f36d3ab7618554ce6ab6affected
  • 1ad7efa552fd5cf4e8c49fea863c5c6a5dcf9f00 to < cc8d5b209e09d3b52bca1ffe00045876842d96aeaffected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.15.5 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References