-

CVE-2026-68444

firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

ffa_partition_info_get() passes uuid_str directly to uuid_parse()
without a NULL check. When a caller passes NULL, uuid_parse() ->
__uuid_parse() -> uuid_is_valid() dereferences the pointer, causing
a kernel panic:

  |  Unable to handle kernel NULL pointer dereference at virtual address
  |  0000000000000040
  |  pc : uuid_parse+0x40/0xac
  |  lr : ffa_partition_info_get+0x1c/0x94 [arm_ffa]

Add a NULL guard before uuid_parse() so a NULL argument returns
-ENODEV instead of crashing. Callers are expected to always supply
a valid partition UUID, so NULL is not a supported input.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version d0c0bce831223b08e5bade2cefc93c3ddb790796
Version < 7dfb020e3048411fbca91e9ad6174da9a2d3e2b3
Status affected
Version d0c0bce831223b08e5bade2cefc93c3ddb790796
Version < ddf85f0c32e05baafbd9c3a44859858db90eec48
Status affected
Version d0c0bce831223b08e5bade2cefc93c3ddb790796
Version < 86f5ea90f73bb7154593bb96f3411e197f3d4fbe
Status affected
Version d0c0bce831223b08e5bade2cefc93c3ddb790796
Version < 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97
Status affected
Version d0c0bce831223b08e5bade2cefc93c3ddb790796
Version < 996c5c19d5b5ac5b98a7b5a406b548305841c301
Status affected
Version d0c0bce831223b08e5bade2cefc93c3ddb790796
Version < 12a42c610e4432e7708cc48d607e5903fffe0aad
Status affected
Version d0c0bce831223b08e5bade2cefc93c3ddb790796
Version < 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.14
Status affected
Version 0
Version < 5.14
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.071
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/12a42c610e4432e7708cc48d607e5903fffe0aad
https://git.kernel.org/stable/c/7201e56e52d18abf4cd0a2fee45daf9dc08b5b97
https://git.kernel.org/stable/c/86f5ea90f73bb7154593bb96f3411e197f3d4fbe
https://git.kernel.org/stable/c/8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8
https://git.kernel.org/stable/c/996c5c19d5b5ac5b98a7b5a406b548305841c301
https://git.kernel.org/stable/c/7dfb020e3048411fbca91e9ad6174da9a2d3e2b3
https://git.kernel.org/stable/c/ddf85f0c32e05baafbd9c3a44859858db90eec48