CVE-2026-64520
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/07/2026
Última modificación:
25/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies<br />
<br />
The register-based PARTITION_INFO_GET path trusted the firmware-provided<br />
indices when copying partition descriptors into the caller buffer.<br />
Reject inconsistent counts or index progressions so the copy loop cannot<br />
write past the allocated array.<br />
<br />
(fixed cur_idx when exactly one descriptor in the first fragment)