CVE-2026-89904: LoongArch: Fix acpi_package_ids[] array overflow
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Fix acpipackageids[] array overflow
With LoongArch virt machine, a typical setting is one core per socket, there will max 256 sockets (packages) on one VM. With PPTT acpi table, array acpipackageids[] will be overflowed.
Here change the array size of acpipackageids[] with the max value of MAXPACKAGES and KVMMAXVCPUS.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
The issue affects Linux kernel instances running on LoongArch virtual machines that use a PPTT ACPI table. A typical affected topology is one core per socket with up to 256 sockets (packages) in a VM.
What condition triggers the overflow?
The overflow occurs when the PPTT ACPI table causes the kernel to record more package IDs than the acpi_package_ids[] array can hold. Large LoongArch VM package counts can reach this condition.
What is the remediation?
Use a kernel containing the fix that sizes acpi_package_ids[] according to MAX_PACKAGES and KVM_MAX_VCPUS. The provided stable-kernel references identify commits carrying the correction.