SB20260812125 - Out-of-bounds write in Linux kernel firmware arm_ffa driver

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds write (CVE-ID: CVE-2026-68401)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to out-of-bounds write in ffa_setup_and_transmit() in the arm_ffa firmware driver when handling malformed memory region descriptors. A local user can trigger the vulnerable code path to cause a denial of service.

The issue includes writing the reserved field out of bounds for FFA versions earlier than 1.2 and insufficient size validation before writing constituents.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/27abdaf0c5c89b06694e4c3d8318e8d6a60c1d1b
• https://git.kernel.org/stable/c/3383ffb7ef937317361713ffcc21921a7848511a
• https://git.kernel.org/stable/c/cf5708c9d78c98214c62b1e5d049cd527a543b8e