Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-89906

LoongArch: BPF: Refactor jump offset calculation in tail call

CVSS 7.8 HighEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 16 Sept 2026, 10:32 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 17c010fe45def335fe03a0718935416b04c7f349 to before 50fbc294e4e96246d60cd66f98acf043a362e3a0 git
  • affected f83d469e16bb1f75991ca67c56786fb2aaa42bea to before 89819868cde78cb2f748533785a46a3430873f20 git
  • affected cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3 to before 882b8912b7e92341fdb115ba0e2e5142a28684ff git
  • affected cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3 to before 96f44d493c280ea161569c43d7ed0f3b0815803a git
  • affected cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3 to before 37d545d12f21c4d50612ecaebd7ae1e5bf91b2d8 git
  • affected 1a782fa32e644aa9fbae6c8488f3e61221ac96e1 git
  • affected f2b5e50cc04d7a049b385bc1c93b9cbf5f10c94f git
  • affected 9262e3e04621558e875eb5afb5e726b648cd5949 git
  • affected 6.6.103 to before 6.6.160 semver
  • affected 6.12.43 to before 6.12.114 semver
  • affected 6.1.149 to before 6.2 semver
  • affected 6.15.11 to before 6.16 semver
  • and 1 more
Other versions: unaffected
Linux Linux
  • affected 6.17
  • unaffected before 6.17 semver
  • unaffected 6.6.160 to 6.6.*, inclusive semver
  • unaffected 6.12.114 to 6.12.*, inclusive semver
  • unaffected 6.18.51 to 6.18.*, inclusive semver
  • unaffected 7.2.5 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-89906
CNA
Linux
Tags
Published
16 Sept 2026
Updated
21 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 15 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 16 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.