CVE-2026-89902

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the LoongArch architecture where the do bp() function can reach kprobe singlestep handler() even when no active probe is present, because userspace can issue the same break instruction (code 11) used by Kprobes. The handler calls preempt enable no resched() without a preceding preempt disable(), causing the current task's preempt count to underflow. This state causes in interrupt() to return true until the task schedules. Consequently, cgroup sk alloc() may treat socket allocations as occurring in interrupt context and assign them to the root cgroup, potentially allowing a socket opened from a SIGTRAP handler to bypass BPF CGROUP INET SOCK CREATE policies attached to the task's own cgroup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.