CVE-2026-89904

Summary

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Fix acpi_package_ids[] array overflow

With LoongArch virt machine, a typical setting is one core per socket, there will max 256 sockets (packages) on one VM. With PPTT acpi table, array acpi_package_ids[] will be overflowed.

Here change the array size of acpi_package_ids[] with the max value of MAX_PACKAGES and KVM_MAX_VCPUS.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf18992be262d6515c94bf4bf6ce7598135076771 < 0195e04b1eec8fb00e2db9c5e55655a3f5e76f60affected
LinuxLinux4427a33faabb4b81511b99dfee18ce0a38b5b5df < d3fd094c13c6d0b74f246461ca4cf427d539c8e8affected
LinuxLinux4e8f58620f6717f72f3d88a2c8f25c0c656d0ba7 < 6311b8c471afa33c18adbe4eb16f862936b71ca3affected
LinuxLinux4e8f58620f6717f72f3d88a2c8f25c0c656d0ba7 < 2a2367d46d7a4ee4122b7a86e57125542dbbe963affected
LinuxLinux496bc868d9066e034787aa14b8ad6c23e77b51efaffected
LinuxLinux6.12.101 < 6.12.110affected
LinuxLinux6.18.42 < 6.18.51affected
LinuxLinux7.1.6 < 7.2affected
LinuxLinux7.2affected
LinuxLinux0 < 7.2unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.51 <= 6.18.*unaffected
LinuxLinux7.2.5 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References