{"id":"CVE-2026-89730","revision":"152bdab9eb4745efa775f437832624e9","records":[{"revision":"152bdab9eb4745efa775f437832624e9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-89730","aliases":[],"title":"fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfpga: altera-cvp: Avoid out-of-bounds read in trailing byte write\n\nThe trailing byte path in altera_cvp_send_block() dereferences a u32\npointer even when only 1-3 bytes remain in the input buffer. If the buffer\nends at a page or scatterlist boundary, this can read past the valid image\ndata and fault.\n\nCopy the remaining bytes into a zero-initialized u32 before writing the\nfinal word so only valid bytes are read from the input buffer.","state":0,"publishedAt":"2026-09-11T19:46:40.581+00:00","modifiedAt":"2026-10-19T08:51:43.578+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/fpga/altera-cvp.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"34d1dc17ce978ae76e676d401b48fe9d004aa948\",\n                            \"lessThan\": \"447b3c893987a0106a65f04b62ec3271892e9d98\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"34d1dc17ce978ae76e676d401b48fe9d004aa948\",\n                            \"lessThan\": \"3b8938f5fbcf4a918785f9cb4b108782eb4ea717\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"34d1dc17ce978ae76e676d401b48fe9d004aa948\",\n                            \"lessThan\": \"2564ac3d3b8b47cd9692a5bf42d668ed7218b54e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"34d1dc17ce978ae76e676d401b48fe9d004aa948\",\n                            \"lessThan\": \"8f3365ed2a5db2ac95ab70a6c47561db39d24537\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"34d1dc17ce978ae76e676d401b48fe9d004aa948\",\n                            \"lessThan\": \"b138bc665e21d4422382ab43aebdf0a2b7bb9cb3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"34d1dc17ce978ae76e676d401b48fe9d004aa948\",\n                            \"lessThan\": \"827ec385458adeeda651de2b6f3537e386b1a8d9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"34d1dc17ce978ae76e676d401b48fe9d004aa948\",\n                            \"lessThan\": \"4dc1051939e499c838229af035464a5fc7671198\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"34d1dc17ce978ae76e676d401b48fe9d004aa948\",\n                            \"lessThan\": \"9da70a43b5fea60d758137f7f0ccfe19356cb5bb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/fpga/altera-cvp.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.14\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.270\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.221\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.109\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.50\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.4\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/447b3c893987a0106a65f04b62ec3271892e9d98","https://git.kernel.org/stable/c/3b8938f5fbcf4a918785f9cb4b108782eb4ea717","https://git.kernel.org/stable/c/2564ac3d3b8b47cd9692a5bf42d668ed7218b54e","https://git.kernel.org/stable/c/8f3365ed2a5db2ac95ab70a6c47561db39d24537","https://git.kernel.org/stable/c/b138bc665e21d4422382ab43aebdf0a2b7bb9cb3","https://git.kernel.org/stable/c/827ec385458adeeda651de2b6f3537e386b1a8d9","https://git.kernel.org/stable/c/4dc1051939e499c838229af035464a5fc7671198","https://git.kernel.org/stable/c/9da70a43b5fea60d758137f7f0ccfe19356cb5bb"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89730","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-89730","identifiers":["CVE-2026-89730"]},"retained":false,"historicalAffected":[]}],"coverage":[]}