CVE-2026-89909

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: KVM: Free init resources if kvm_init() fails

kvm_loongarch_init() calls kvm_loongarch_env_init() to allocate the

per-CPU kvm_context (vmcs) and kvm_loongarch_ops and to register the

perf callbacks, and then calls kvm_init(). If kvm_init() fails its

result is returned directly, but since module_init() does not run the

module_exit() stuff on failure, so kvm_loongarch_env_exit() is never

called and those resources are leaked.

So call kvm_loongarch_env_exit() when kvm_init() fails, matching the

teardown-on-failure pattern used by riscv_kvm_init().

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References