{"id":"CVE-2026-89904","revision":"4e0fe6d93f694ce189d76a50fd286a6c","records":[{"revision":"4e0fe6d93f694ce189d76a50fd286a6c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-89904","aliases":[],"title":"LoongArch: Fix acpi_package_ids[] array overflow","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nLoongArch: Fix acpi_package_ids[] array overflow\n\nWith LoongArch virt machine, a typical setting is one core per socket,\nthere will max 256 sockets (packages) on one VM. With PPTT acpi table,\narray acpi_package_ids[] will be overflowed.\n\nHere change the array size of acpi_package_ids[] with the max value of\nMAX_PACKAGES and KVM_MAX_VCPUS.","state":0,"publishedAt":"2026-09-16T10:32:03.752+00:00","modifiedAt":"2026-10-19T08:54:37.029+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/loongarch/kernel/acpi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"f18992be262d6515c94bf4bf6ce7598135076771\",\n                            \"lessThan\": \"0195e04b1eec8fb00e2db9c5e55655a3f5e76f60\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4427a33faabb4b81511b99dfee18ce0a38b5b5df\",\n                            \"lessThan\": \"d3fd094c13c6d0b74f246461ca4cf427d539c8e8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4e8f58620f6717f72f3d88a2c8f25c0c656d0ba7\",\n                            \"lessThan\": \"6311b8c471afa33c18adbe4eb16f862936b71ca3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4e8f58620f6717f72f3d88a2c8f25c0c656d0ba7\",\n                            \"lessThan\": \"2a2367d46d7a4ee4122b7a86e57125542dbbe963\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"496bc868d9066e034787aa14b8ad6c23e77b51ef\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.12.101\",\n                            \"lessThan\": \"6.12.110\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.42\",\n                            \"lessThan\": \"6.18.51\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.6\",\n                            \"lessThan\": \"7.2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/loongarch/kernel/acpi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"7.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.51\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.5\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.4,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/0195e04b1eec8fb00e2db9c5e55655a3f5e76f60","https://git.kernel.org/stable/c/d3fd094c13c6d0b74f246461ca4cf427d539c8e8","https://git.kernel.org/stable/c/6311b8c471afa33c18adbe4eb16f862936b71ca3","https://git.kernel.org/stable/c/2a2367d46d7a4ee4122b7a86e57125542dbbe963"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89904","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-89904","identifiers":["CVE-2026-89904"]},"retained":false,"historicalAffected":[]}],"coverage":[]}