{"id":"CVE-2026-89906","revision":"7e32f121e75241ba9eefd7f0e31e83ea","records":[{"revision":"7e32f121e75241ba9eefd7f0e31e83ea","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-89906","aliases":[],"title":"LoongArch: BPF: Refactor jump offset calculation in tail call","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nLoongArch: BPF: Refactor jump offset calculation in tail call\n\nThe old macro-based jmp_offset calculation derives the jump distance\nfrom a stale prior-pass code stride, which can lead to wrong branch\noffsets and soft lockups under extra JIT passes.\n\nFix this by calculating the offset directly on the absolute target:\n\"ctx->offset[insn + 1] - ctx->idx\".\n\nTo avoid a false 16-bit range check abort during size estimation, add\na \"ctx->image == NULL\" guard to inject a safe dummy offset.","state":0,"publishedAt":"2026-09-16T10:32:05.157+00:00","modifiedAt":"2026-10-21T12:49:06.262+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/loongarch/net/bpf_jit.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"17c010fe45def335fe03a0718935416b04c7f349\",\n                            \"lessThan\": \"50fbc294e4e96246d60cd66f98acf043a362e3a0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f83d469e16bb1f75991ca67c56786fb2aaa42bea\",\n                            \"lessThan\": \"89819868cde78cb2f748533785a46a3430873f20\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3\",\n                            \"lessThan\": \"882b8912b7e92341fdb115ba0e2e5142a28684ff\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3\",\n                            \"lessThan\": \"96f44d493c280ea161569c43d7ed0f3b0815803a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3\",\n                            \"lessThan\": \"37d545d12f21c4d50612ecaebd7ae1e5bf91b2d8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1a782fa32e644aa9fbae6c8488f3e61221ac96e1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2b5e50cc04d7a049b385bc1c93b9cbf5f10c94f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9262e3e04621558e875eb5afb5e726b648cd5949\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.6.103\",\n                            \"lessThan\": \"6.6.160\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.43\",\n                            \"lessThan\": \"6.12.114\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.149\",\n                            \"lessThan\": \"6.2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.15.11\",\n                            \"lessThan\": \"6.16\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.16.2\",\n                            \"lessThan\": \"6.17\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/loongarch/net/bpf_jit.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.17\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.114\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.51\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.5\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/50fbc294e4e96246d60cd66f98acf043a362e3a0","https://git.kernel.org/stable/c/89819868cde78cb2f748533785a46a3430873f20","https://git.kernel.org/stable/c/882b8912b7e92341fdb115ba0e2e5142a28684ff","https://git.kernel.org/stable/c/96f44d493c280ea161569c43d7ed0f3b0815803a","https://git.kernel.org/stable/c/37d545d12f21c4d50612ecaebd7ae1e5bf91b2d8"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89906","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-89906","identifiers":["CVE-2026-89906"]},"retained":false,"historicalAffected":[]}],"coverage":[]}