The Linux kernel arm_ffa firmware component contained a vulnerability where the function ffa_partition_info_get() did not validate the uuid_str argument before passing it to uuid_parse(). If uuid_str was NULL, uuid_parse() and its internal calls would dereference the NULL pointer, causing a kernel panic. The fix involves adding a NULL guard before calling uuid_parse(), returning -ENODEV when a NULL argument is passed, preventing the kernel crash. Callers are expected to provide a valid partition UUID, so NULL input is unsupported.

This vulnerability can cause a kernel panic due to a NULL pointer dereference when a NULL UUID string is passed to ffa_partition_info_get(). This results in a denial of service condition by crashing the kernel. There is no indication of code execution or privilege escalation from the provided data.

A fix has been implemented that adds a NULL check before calling uuid_parse() in ffa_partition_info_get(), preventing kernel panic by returning an error for NULL input. Users should apply the official Linux kernel update that includes this fix. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel release notes for the specific patch version and update accordingly.