fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write (Linux Linux)

CVE-2026-89730
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.22 % · centile 12 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Received

Description

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in altera_cvp_send_block() dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or scatterlist boundary, this can read past the valid image data and fault. Copy the remaining bytes into a zero-initialized u32 before writing the final word so only valid bytes are read from the input buffer.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected 34d1dc17ce978ae76e676d401b48fe9d004aa948 < 447b3c893987a0106a65f04b62ec3271892e9d98 ; affected 34d1dc17ce978ae76e676d401b48fe9d004aa948 < 3b8938f5fbcf4a918785f9cb4b108782eb4ea717 ; affected 34d1dc17ce978ae76e676d401b48fe9d004aa948 < 2564ac3d3b8b47cd9692a5bf42d668ed7218b54e ; affected 34d1dc17ce978ae76e676d401b48fe9d004aa948 < 8f3365ed2a5db2ac95ab70a6c47561db39d24537 ; affected 34d1dc17ce978ae76e676d401b48fe9d004aa948 < b138bc665e21d4422382ab43aebdf0a2b7bb9cb3 ; affected 34d1dc17ce978ae76e676d401b48fe9d004aa948 < 827ec385458adeeda651de2b6f3537e386b1a8d9
Linux · Linuxaffected 4.14 ; unaffected 0 < 4.14 ; unaffected 5.10.270 ≤ 5.10.* ; unaffected 5.15.221 ≤ 5.15.* ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD