CVE-2026-64520
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-b
CVSS
8.4
Alto
EPSS
0.1%
p3
KEV
—
Exploit Today
1
0-100
Publicado: 25 jul 2026 · Última mod.: 27 jul 2026
0.1%EPSS · 30 días0.1%
2026-08-042026-08-31
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-based PARTITION_INFO_GET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index progressions so the copy loop cannot write past the allocated array. (fixed cur_idx when exactly one descriptor in the first fragment)
Sin CVEs relacionados por CWE o producto.