diff --git a/Bugfix-hw-acpi-Use-max_cpus-instead-of-cpus-when-bui.patch b/Bugfix-hw-acpi-Use-max_cpus-instead-of-cpus-when-bui.patch
new file mode 100644
index 0000000000000000000000000000000000000000..dc0263a067bd8160dea4c69bfcfccd43178d2afd
--- /dev/null
+++ b/Bugfix-hw-acpi-Use-max_cpus-instead-of-cpus-when-bui.patch
@@ -0,0 +1,33 @@
+From 905c910373b5e6362181f227a1564eb3bef5a353 Mon Sep 17 00:00:00 2001
+From: kevinZhu <zhukeqian94@163.com>
+Date: Thu, 29 Oct 2020 19:24:48 +0800
+Subject: [PATCH] Bugfix: hw/acpi: Use max_cpus instead of cpus when build PPTT
+ table
+
+The field "cpus" is the initial number of CPU for guest, and the field
+ "max_cpus" is the max number of CPU after CPU hotplug. When building PPTT for
+ guest, we should take all CPUs into account, otherwise the "smp_sockets" is
+ wrong.
+
+Fixes: 7cfcd8c8a2fe ("build smt processor structure to support smt topology")
+Signed-off-by: Keqian Zhu <zhukeqian1@huawei.com>
+---
+ hw/acpi/aml-build.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/hw/acpi/aml-build.c b/hw/acpi/aml-build.c
+index 8a3b51c835..f01669df57 100644
+--- a/hw/acpi/aml-build.c
++++ b/hw/acpi/aml-build.c
+@@ -167,7 +167,7 @@ void build_pptt(GArray *table_data, BIOSLinker *linker, int possible_cpus)
+     struct offset_status offset;
+     const MachineState *ms = MACHINE(qdev_get_machine());
+     unsigned int smp_cores = ms->smp.cores;
+-    unsigned int smp_sockets = ms->smp.cpus / (smp_cores * ms->smp.threads);
++    unsigned int smp_sockets = ms->smp.max_cpus / (smp_cores * ms->smp.threads);
+ 
+     acpi_data_push(table_data, sizeof(AcpiTableHeader));
+ 
+-- 
+2.27.0
+
diff --git a/qemu.spec b/qemu.spec
index 6972275d372b2ac31a38ff9f9b40d733fb0f2948..a71198f835b50bb0dbedeaa2e96bab43f6408be6 100644
--- a/qemu.spec
+++ b/qemu.spec
@@ -1,6 +1,6 @@
 Name: qemu
 Version: 4.1.0
-Release: 33
+Release: 34
 Epoch: 2
 Summary: QEMU is a generic and open source machine emulator and virtualizer
 License: GPLv2 and BSD and MIT and CC-BY
@@ -303,6 +303,7 @@ Patch0290: sm501-Clean-up-local-variables-in-sm501_2d_operation.patch
 Patch0291: sm501-Replace-hand-written-implementation-with-pixma.patch
 Patch0292: pci-check-bus-pointer-before-dereference.patch
 Patch0293: hw-ide-check-null-block-before-_cancel_dma_sync.patch
+Patch0294: Bugfix-hw-acpi-Use-max_cpus-instead-of-cpus-when-bui.patch
 
 BuildRequires: flex
 BuildRequires: bison
@@ -649,6 +650,9 @@ getent passwd qemu >/dev/null || \
 %endif
 
 %changelog
+* Thu Oct 29 2020 Huawei Technologies Co., Ltd <alex.chen@huawei.com>
+- Bugfix: hw/acpi: Use max_cpus instead of cpus when build PPTT table
+
 * Wed Oct 14 2020 Prasad J Pandit <pjp@fedoraproject.org>
 - pci: check bus pointer before dereference
 - hw/ide: check null block before _cancel_dma_sync