Linux Kernel KVM EUVD-2026-25462

Apply vendor-released kernel updates to fixed versions: 6.18.21, 6.19.11, or 7.0 and later for respective stable branches, or apply upstream commits 126053d0a685bf1f2e98db8966386f38b2336338, 2a0cbcd28ecf6e0b88fa498bebb94bd1be61a7c3, or b97bd69eb0f67b5f961b304d28e9ba45e202d841 available at https://git.kernel.org/stable/. For systems unable to immediately patch, disable KVM functionality on LoongArch systems if virtualization is not operationally required (trade-off: eliminates virtual machine capabilities entirely). Restrict access to /dev/kvm device file to trusted administrative users only via chmod 600 /dev/kvm and review KVM-capable user group memberships (trade-off: limits legitimate virtualization use cases, does not prevent exploitation by already-privileged users). Monitor for abnormal KVM guest behavior including unexpected crashes or memory access violations via kernel logs and auditd. No configuration-level workaround exists that maintains KVM functionality while mitigating the vulnerability, making kernel update the only complete remediation.