PT-2026-93545 · Linux · Linux Kernel

CVE-2026-89904

·

Published

2026-09-16

·

Updated

2026-09-24

CVSS v3.1

8.4

High

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An array overflow occurs in the acpi package ids[] array when using a LoongArch virtual machine. This issue is triggered by the PPTT ACPI table in configurations where there is one core per socket, potentially reaching up to 256 sockets per virtual machine.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2026-89904
OPENSUSE-SU-2026:11880-1

Affected Products

Linux Kernel