OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89904

HIGH · CVSS 8.4 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of the acpi_package_ids[] array within the LoongArch virtual machine configuration, where an overflow can occur when managing up to 256 sockets. This could lead to potential instability or unexpected behavior in virtualized environments. Organizations utilizing LoongArch architecture in their Linux deployments should prioritize this fix to ensure system reliability and security.

CVE
CVE-2026-89904
Severity
HIGH
CVSS
8.4
EPSS
0.20%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix acpi_package_ids[] array overflow With LoongArch virt machine, a typical setting is one core per socket, there will max 256 sockets (packages) on one VM. With PPTT acpi table, array acpi_package_ids[] will be overflowed. Here change the array size of acpi_package_ids[] with the max value of MAX_PACKAGES and KVM_MAX_VCPUS.