Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-64520

firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-based PARTITION_INFO_GET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index progressions so the copy loop cannot write past the allocated array. (fixed cur_idx when exactly one descriptor in the first fragment)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ba85c644ac8dc37d9b01a3332c2f142cb4d46954 to < f39bc7ebe75e2186b417a024a7f7e2fd4cc7eb95affected
  • ba85c644ac8dc37d9b01a3332c2f142cb4d46954 to < 79d95c02ae0a95e6e80e8e92b7ca74ecee02854faffected
  • ba85c644ac8dc37d9b01a3332c2f142cb4d46954 to < 3974ea1938406f9bfa7c1f48d4e43533f447bb08affected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.18.34 to ≤ 6.18.*unaffected
  • 7.0.11 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References