CVE-2026-89596

A flaw was found in the Linux kernel's forcedeth driver. An off-by-one error in the nv_suspend() and nv_resume() functions, which handle saving and restoring non-PCI configuration space, can lead to an out-of-bounds memory access. This occurs during system suspend and resume operations. If specific kernel debugging options are enabled, this vulnerability could cause the kernel to crash, leading to a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.