Threats Tagged 'cve-2026-89730'

A vulnerability in the Linux kernel's fpga altera-cvp driver could cause an out-of-bounds read during a trailing byte write operation. This occurs because the function altera_cvp_send_block() dereferences a 32-bit pointer even when fewer than 4 bytes remain in the input buffer, potentially reading past valid data and causing a fault. The issue is addressed by copying the remaining bytes into a zero-initialized 32-bit variable before writing the final word, ensuring only valid bytes are read.