CVE-2026-64081
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
20/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
firmware: arm_ffa: Validate framework notification message layout<br />
<br />
Framework notifications carry an indirect message in the shared RX<br />
buffer. Validate the reported offset and size before using them, reject<br />
zero-length payloads, and ensure that any non-header payload starts at<br />
the UUID field rather than in the middle of the message header.<br />
<br />
Use the validated offset and size values for both kmemdup() and the UUID<br />
parsing path so malformed firmware data cannot drive an out-of-bounds<br />
read or an oversized allocation.
Impact
Base Score 3.x
8.40
Severity 3.x
HIGH