kernel: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (CVE-2026-89730)

Overview

A flaw was found in the altera-cvp FPGA driver within the Linux kernel. The altera_cvp_send_block() function can perform an out-of-bounds read when processing the trailing bytes of an input buffer. This occurs if the buffer ends at a page or scatterlist boundary, causing the function to read past valid image data. A local attacker could potentially exploit this to trigger a system fault, leading to a denial of service.

Vendor advisories

• Red Hat VEX · Moderate · updated 2026-09-16 · vex

kernel: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-16.

Not affected:

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Red Hat OpenShift Container Platform 4

Remediation

Refer to the advisory for fix availability.