Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-89902

LoongArch: Avoid preempt count underflow without probe

CVSS 7.8 HighEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 16 Sept 2026, 10:32 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 6d4cc40fb5f58147defc6c0e9d86e6232fe31616 to before ff40e597d5d98c0c45a4d09df8177202fac9520e git
  • affected 6d4cc40fb5f58147defc6c0e9d86e6232fe31616 to before a1cb727fa27c2d9c7859729cd90db7bc0f46957f git
  • affected 6d4cc40fb5f58147defc6c0e9d86e6232fe31616 to before 76395109a051b53860faaec96522ef08ae9e8e27 git
  • affected 6d4cc40fb5f58147defc6c0e9d86e6232fe31616 to before c4357ebeee63cb8da1446fc936573a34e68b0f71 git
  • affected 6d4cc40fb5f58147defc6c0e9d86e6232fe31616 to before 72ce4b24676e8b3b75376c4c559dd81c1ac52d5a git
Other versions: unaffected
Linux Linux
  • affected 6.3
  • unaffected before 6.3 semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.51 to 6.18.*, inclusive semver
  • unaffected 7.2.5 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-89902
CNA
Linux
Tags
Published
16 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 16 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.