Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notification message layout Framework… (CVE-2026-64081)

CVE-2026-64081 addresses a vulnerability in the Linux kernel's ARM Firmware Framework for ARMv8-A (FFA) where framework notifications carry indirect messages in a shared RX buffer. The vulnerability stems from insufficient validation of the reported offset and size before usage, acceptance of zero-length payloads, and improper alignment of non-header payloads within the message header. These issues could allow malformed firmware data to cause out-of-bounds reads or oversized memory allocations. The fix involves validating offset and size values before use in memory duplication and UUID parsing. This vulnerability is fixed in Linux kernel versions 7.0.0-28.28.1 and later, as part of a comprehensive security update addressing multiple kernel subsystems.

The vulnerability could allow an attacker to cause out-of-bounds reads or trigger oversized memory allocations due to malformed firmware data, potentially leading to system compromise affecting confidentiality, integrity, and availability. The CVSS 3.1 score of 8.4 reflects high impact with local attack vector, low complexity, no privileges required, no user interaction, and unchanged scope.

A patch is available and should be applied by updating to Linux kernel versions 7.0.0-28.28.1 or later as provided by the vendor. The Ubuntu security advisories USN-8593-1 and USN-8603-1 provide detailed update instructions. After updating, a system reboot is required. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary. Follow the vendor's official update process to ensure complete remediation.