CVE-2026-68401

Received Received - Intake

Memory Corruption in Linux Kernel ARM FFA Driver

Publication date: 2026-08-10

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() Sashiko (locally) reports multiple out-of-bound issues in ffa_setup_and_transmit: 1) Writing ep_mem_access->reserved can write out of bounds for FFA versions < 1.2 as ffa_emad_size_get() returns 16 bytes in that case while reserved has an offset of 24. Instead of zeroing fields, memset the struct to zero first based on the FFA version. 2) Make sure there is enough size to write constituents. While at it, convert the only sizeof() in the driver that uses a type instead of variable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-17

Generated

2026-08-30

AI Q&A

2026-08-10

EPSS Evaluated

2026-08-29

NVD

CVE-2026-68401

EUVD

EUVD-2026-55587

Affected Vendors & Products

Vendor	Product	Version / Range
arm	ffa	to 1.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's firmware arm_ffa driver. It involves out-of-bounds writes in the ffa_setup_and_transmit function. For FFA versions below 1.2, writing to reserved fields can exceed buffer limits because ffa_emad_size_get returns 16 bytes while reserved has an offset of 24. The fix involves zeroing the struct based on FFA version and ensuring sufficient size for writing constituents.

Detection Guidance

This vulnerability is specific to the Linux kernel's arm_ffa driver and involves out-of-bound writes in ffa_setup_and_transmit(). Detection requires checking the kernel version and examining the driver code for the affected function. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could allow memory corruption or crashes in systems using the affected Linux kernel component. Attackers might exploit it to execute arbitrary code, escalate privileges, or cause denial-of-service conditions on vulnerable systems.

Compliance Impact

This vulnerability involves out-of-bound writes in the Linux kernel's firmware arm_ffa driver, which could lead to memory corruption or crashes. Such low-level memory issues may impact system stability and security, potentially affecting compliance with standards like GDPR or HIPAA that require robust data protection and system integrity. However, no direct evidence in the provided context links this specific vulnerability to compliance violations.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for this vulnerability. Monitor kernel security advisories and apply patches promptly. If using a custom kernel, backport the fix from the official kernel source.

Hi! I’m here to help you understand CVE-2026-68401. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70