{
  "cveId": "CVE-2026-31564",
  "url": "https://patchblox.com/security/cve/CVE-2026-31564",
  "summary": "CVE-2026-31564 is fixed in linux on 1 platform by DEBIAN-CVE-2026-31564 (version 6.19.11-1), released May 15, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  LoongArch: KVM: Fix base address calculation in...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access()  In function kvm_eiointc_regs_access(), the register base address is caculated from array base address plus offset, the offset is absolute value from the base address. The data type of array base address is u64, it should be converted into the \u0022void *\u0022 type and then plus the offset.",
  "published": "2026-04-24T15:16:30Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00107,
  "epssPercentile": 0.01166,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.19.11-1",
      "fix": "DEBIAN-CVE-2026-31564",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-31564",
      "released": "2026-05-15T16:01:09Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}