CVE-2026-89730

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the altera-cvp FPGA component. The trailing byte path in the altera cvp send block() function dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or scatterlist boundary, the system may read past the valid image data, potentially leading to a fault.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.