CVE-2026-89730
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in altera_cvp_send_block() dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or scatterlist boundary, this can read past the valid image data and fault. Copy the remaining bytes into a zero-initialized u32 before writing the final word so only valid bytes are read from the input buffer.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 11, 2026
First seenSep 11, 2026
How to fix
Update
- Linux Linux447b3c893987a0106a65f04b62ec3271892e9d98, 3b8938f5fbcf4a918785f9cb4b108782eb4ea717, 2564ac3d3b8b47cd9692a5bf42d668ed7218b54e, 8f3365ed2a5db2ac95ab70a6c47561db39d24537, b138bc665e21d4422382ab43aebdf0a2b7bb9cb3, 827ec385458adeeda651de2b6f3537e386b1a8d9, 4dc1051939e499c838229af035464a5fc7671198, 9da70a43b5fea60d758137f7f0ccfe19356cb5bb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 34d1dc17ce978ae76e676d401b48fe9d004aa948 ≤ v < 447b3c893987a0106a65f04b62ec3271892e9d98, 34d1dc17ce978ae76e676d401b48fe9d004aa948 ≤ v < 3b8938f5fbcf4a918785f9cb4b108782eb4ea717, 34d1dc17ce978ae76e676d401b48fe9d004aa948 ≤ v < 2564ac3d3b8b47cd9692a5bf42d668ed7218b54e, 34d1dc17ce978ae76e676d401b48fe9d004aa948 ≤ v < 8f3365ed2a5db2ac95ab70a6c47561db39d24537, 34d1dc17ce978ae76e676d401b48fe9d004aa948 ≤ v < b138bc665e21d4422382ab43aebdf0a2b7bb9cb3, 34d1dc17ce978ae76e676d401b48fe9d004aa948 ≤ v < 827ec385458adeeda651de2b6f3537e386b1a8d9, 34d1dc17ce978ae76e676d401b48fe9d004aa948 ≤ v < 4dc1051939e499c838229af035464a5fc7671198, 34d1dc17ce978ae76e676d401b48fe9d004aa948 ≤ v < 9da70a43b5fea60d758137f7f0ccfe19356cb5bb, 4.14 | 447b3c893987a0106a65f04b62ec3271892e9d98, 3b8938f5fbcf4a918785f9cb4b108782eb4ea717, 2564ac3d3b8b47cd9692a5bf42d668ed7218b54e, 8f3365ed2a5db2ac95ab70a6c47561db39d24537, b138bc665e21d4422382ab43aebdf0a2b7bb9cb3, 827ec385458adeeda651de2b6f3537e386b1a8d9, 4dc1051939e499c838229af035464a5fc7671198, 9da70a43b5fea60d758137f7f0ccfe19356cb5bb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.