CVE-2026-93237

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description On LoongArch architectures, the kernel fails to define DIRECT MAP PHYSMEM END, causing get free mem region() and mhp get pluggable range() to use a compile-time constant fallback that does not adapt to the CPU's physical address space bits (cpu pabits). On CPUs with fewer physical address bits than MAX PHYSMEM BITS, such as the Loongson-2K series, this allows get free mem region() to return a ZONE DEVICE region outside the vmemmap window. Consequently, vmemmap populate() may wrap the memmap range and map it into low memory, leading to silent corruption of page tables. This issue has previously caused crashes in memmap init zone device() on Loongson-3C6000 systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.