CVE-2026-89904
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-89904, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-16
Last updated on: 2026-09-16
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Fix acpi_package_ids[] array overflow
With LoongArch virt machine, a typical setting is one core per socket,
there will max 256 sockets (packages) on one VM. With PPTT acpi table,
array acpi_package_ids[] will be overflowed.
Here change the array size of acpi_package_ids[] with the max value of
MAX_PACKAGES and KVM_MAX_VCPUS.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | f18992be262d6515c94bf4bf6ce7598135076771 |
| Linux | Linux | 4427a33faabb4b81511b99dfee18ce0a38b5b5df |
| Linux | Linux | 4e8f58620f6717f72f3d88a2c8f25c0c656d0ba7 |
| Linux | Linux | 4e8f58620f6717f72f3d88a2c8f25c0c656d0ba7 |
| Linux | Linux | 496bc868d9066e034787aa14b8ad6c23e77b51ef |
| Linux | Linux | 6.12.101 |
| Linux | Linux | 6.18.42 |
| Linux | Linux | 7.1.6 |
| Linux | Linux | 7.2 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
