8.4

CVE-2026-89904

LoongArch: Fix acpi_package_ids[] array overflow

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Fix acpi_package_ids[] array overflow

With LoongArch virt machine, a typical setting is one core per socket,
there will max 256 sockets (packages) on one VM. With PPTT acpi table,
array acpi_package_ids[] will be overflowed.

Here change the array size of acpi_package_ids[] with the max value of
MAX_PACKAGES and KVM_MAX_VCPUS.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f18992be262d6515c94bf4bf6ce7598135076771
Version < 0195e04b1eec8fb00e2db9c5e55655a3f5e76f60
Status affected
Version 4427a33faabb4b81511b99dfee18ce0a38b5b5df
Version < d3fd094c13c6d0b74f246461ca4cf427d539c8e8
Status affected
Version 4e8f58620f6717f72f3d88a2c8f25c0c656d0ba7
Version < 6311b8c471afa33c18adbe4eb16f862936b71ca3
Status affected
Version 4e8f58620f6717f72f3d88a2c8f25c0c656d0ba7
Version < 2a2367d46d7a4ee4122b7a86e57125542dbbe963
Status affected
Version 496bc868d9066e034787aa14b8ad6c23e77b51ef
Status affected
Version 6.12.101
Version < 6.12.110
Status affected
Version 6.18.42
Version < 6.18.51
Status affected
Version 7.1.6
Version < 7.2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.2
Status affected
Version 0
Version < 7.2
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0195e04b1eec8fb00e2db9c5e55655a3f5e76f60
https://git.kernel.org/stable/c/d3fd094c13c6d0b74f246461ca4cf427d539c8e8
https://git.kernel.org/stable/c/6311b8c471afa33c18adbe4eb16f862936b71ca3
https://git.kernel.org/stable/c/2a2367d46d7a4ee4122b7a86e57125542dbbe963