libloong

LoongArch64 sandboxing library libloong is a 64-bit high-performance LoongArch emulator library designed for embedding and high-frequency scripting. Built on the architecture of libriscv, it provides the fastest 64-bit interpreter performance available, maintaining a compact 18k LOC codebase with...

LoongBleed

LoongBleed 中文 LoongBleed is a hardware vulnerability, conceptually similar to ZenBleed CVE-2023-20593 — affecting Loongson LA464/LA664 processors that implement both LSX 128-bit SIMD and LASX 256-bit SIMD. On LoongArch, the LSX $vr registers 128-bit alias the lower half of the LASX $xr registers...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam. When both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y are enabled, disabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check irq validity in kvmvcpuioctlinterrupt The function kvmvcpuioctlinterrupt can be called from userspace. Here, checking of irq validity is added within kvmvcpuioctlinterrupt...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Do not save/restore percpu base register in rethook trampoline The rethook trampoline saves $r21 $u0, the percpu base, into its frame at entry and restores it at exit. Between rethooktrampolinehandler, it may be...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM – Validated the irqchip index in irqfd routing. Sashiko reported that the irqchip index was not validated for LoongArch. Validation must be added, and irqchip indices outside the range should be rejected, to preven...

CVE-2026-89908

A flaw was found in the LoongArch KVM Kernel-based Virtual Machine component of the Linux kernel. During certain memory slot updates, the architectural flags are not correctly preserved. This can lead to a guest virtual machine accessing incorrect host memory pages, potentially resulting in...

CVE-2026-89906

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component for LoongArch architecture. An issue with the jump offset calculation in BPF tail calls, caused by using a stale prior-pass code stride, can lead to incorrect branch offsets. This vulnerability could result in soft lockup...

CVE-2026-89905

A flaw was found in the Linux kernel, specifically within the LoongArch architecture's Berkeley Packet Filter BPF component. The stack layout incorrectly places the arena register slot above the tail call counter context. When the arenavmstart feature is dynamically enabled, this misalignment can...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 “MIPS: smp: report dying CPU to RCU in stopthiscpu”. smpsendstop parks all secondary CPUs via stopthiscpu. The function marks the CPU...

K000164047: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46152 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rxresult ieee80211invokefastrx is documented as safe for parallel RX, but its per-invocation rxresult is declared static. Concurrent...

CVE-2026-93237

A flaw was found in the Linux kernel. An incorrect physical memory boundary check on LoongArch systems allows device memory allocations to fall outside the supported virtual memory mapping space. When the kernel attempts to map this out-of-bounds memory, an address wraparound occurs that silently...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing NULL checks for kstrdup 1. Replace “offindnodebypath"/" with “ofroot” to prevent multiple calls to “ofnodeput”. 2. Fix a potential kernel oops that occurs during early boot when memory allocation fails whil...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Added spectre boundary for syscall dispatch table The LoongArch syscall number is directly controlled by userspace; however, there is no arrayindexnospec boundary to prevent access beyond the syscall function pointer...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Make kvmgetvcpubycpuid more robust kvmgetvcpubycpuid accepts a cpuid parameter of type int; therefore, cpuid can be negative. In such cases, kvmgetvcpubycpuid should return NULL to improve robustness. This fix...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Define the ioaw hook as mmiowb Commit fb24ea52f78e0d595852e "drivers: Remove explicit invocations of mmiowb" remove all mmiowb in drivers, but it says: "NOTE: mmiowb has only ever guaranteed ordering in conjunction wit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Disable IRQs before initfn for non-boot CPUs. Disable IRQs before initfn for non-boot CPUs during hotplug operations, in order to silence such warnings and also to avoid potential errors due to unexpected interrupts...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set all reserved memblocks on Node0 at initialization After commit 61167ad5fecdea “mm: pass nid to reservebootmemregion”, a panic occurs if DEFERREDSTRUCTPAGEINIT is enabled: 0.000000 CPU 0 Unable to handle kernel pagi...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Prevent out-of-bounds memory access The testtag test triggers an unhandled page fault: ./testtag 130.640218 CPU 0 Unable to handle kernel paging request at virtual address ffff80001b898004, era == 9000000003137f7c...