Strix
64.3K

CVE-2026-89730

UnknownEPSS 0.20%

Last modified

CVE-2026-89730 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in altera_cvp_send_block() dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or scatterlist boundary, this can read past the valid image data and fault. Copy the remaining bytes into a zero-initialized u32 before writing the final word so only valid bytes are read from the input buffer.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in altera_cvp_send_block() dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or scatterlist boundary, this can read past the valid image data and fault. Copy the remaining bytes into a zero-initialized u32 before writing the final word so only valid bytes are read from the input buffer.

Metrics

EPSS Probability
0.20%

9.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 34d1dc17ce978ae76e676d401b48fe9d004aa948, < 447b3c893987a0106a65f04b62ec3271892e9d98; >= 34d1dc17ce978ae76e676d401b48fe9d004aa948, < 3b8938f5fbcf4a918785f9cb4b108782eb4ea717; >= 34d1dc17ce978ae76e676d401b48fe9d004aa948, < 2564ac3d3b8b47cd9692a5bf42d668ed7218b54e; >= 34d1dc17ce978ae76e676d401b48fe9d004aa948, < 8f3365ed2a5db2ac95ab70a6c47561db39d24537; >= 34d1dc17ce978ae76e676d401b48fe9d004aa948, < b138bc665e21d4422382ab43aebdf0a2b7bb9cb3; >= 34d1dc17ce978ae76e676d401b48fe9d004aa948, < 827ec385458adeeda651de2b6f3537e386b1a8d9; >= 34d1dc17ce978ae76e676d401b48fe9d004aa948, < 4dc1051939e499c838229af035464a5fc7671198; >= 34d1dc17ce978ae76e676d401b48fe9d004aa948, < 9da70a43b5fea60d758137f7f0ccfe19356cb5bb
LinuxLinux4.14

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-89730?
In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in altera_cvp_send_block() dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or scatterlist boundary, this can read past the valid image data and fault. Copy the remaining bytes into a zero-initialized u32 before writing the final word so only valid bytes are read from the input buffer.
How severe is CVE-2026-89730?
Severity scoring for CVE-2026-89730 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2026-89730?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-89730?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST