CVE-2026-64081
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
20/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
firmware: arm_ffa: Validate framework notification message layout<br />
<br />
Framework notifications carry an indirect message in the shared RX<br />
buffer. Validate the reported offset and size before using them, reject<br />
zero-length payloads, and ensure that any non-header payload starts at<br />
the UUID field rather than in the middle of the message header.<br />
<br />
Use the validated offset and size values for both kmemdup() and the UUID<br />
parsing path so malformed firmware data cannot drive an out-of-bounds<br />
read or an oversized allocation.
Impacto
Puntuación base 3.x
8.40
Gravedad 3.x
ALTA