CVE-2026-89904

Summary

This vulnerability involves an array overflow in the acpi_package_ids[] array in the LoongArch virtual machine implementation, potentially leading to system instability or security issues.

Exploitability

Exploitation requires specific kernel configuration and a PPTT ACPI table, making it less likely but still feasible for attackers with detailed knowledge of the system.

Blast radius

If exploited, the impact could range from system crashes to potential privilege escalation, depending on the system's configuration and the attacker's capabilities.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the specific version mentioned in the fix: 'Upgrade to 5.10.100 or later'.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.