CVE-2026-89909

Source
https://cve.org/CVERecord?id=CVE-2026-89909
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89909.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89909
Downstream
Published
2026-09-16T10:32:07Z
Modified
2026-09-17T03:47:27Z
Summary
LoongArch: KVM: Free init resources if kvm_init() fails
Details

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Free init resources if kvm_init() fails

kvm_loongarch_init() calls kvm_loongarch_env_init() to allocate the per-CPU kvm_context (vmcs) and kvm_loongarch_ops and to register the perf callbacks, and then calls kvm_init(). If kvm_init() fails its result is returned directly, but since module_init() does not run the module_exit() stuff on failure, so kvm_loongarch_env_exit() is never called and those resources are leaked.

So call kvm_loongarch_env_exit() when kvm_init() fails, matching the teardown-on-failure pattern used by riscv_kvm_init().

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89909.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2bd6ac68726131da32ace9717aa63ff68cf6605c
Fixed
6bbbd7b719233645a5c120557a9ca1422e6b7a48
Fixed
6b78786ee7260d9818cf1d7a245b7a655ef83076
Fixed
3bf6f5e2e1007d38a5f35bd37e94ab645a0c40bc
Fixed
f7a1064cce3b100b54780c68529176232d8eb01e

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89909.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89909.json"