Threats Tagged 'cve-2026-64081'

A vulnerability in the Linux kernel's ARM Firmware Framework for ARMv8-A (FFA) was resolved by validating framework notification message layouts. The issue involved improper validation of offsets and sizes in shared RX buffer messages, which could lead to out-of-bounds reads or oversized allocations. This flaw was fixed in Linux kernel versions 7.0.0-28.28.1 and later. The vulnerability has a CVSS score of 8.4, indicating high severity, with impacts on confidentiality, integrity, and availability. A patch is available and should be applied. The vulnerability is part of a broader set of Linux kernel security fixes released by Ubuntu in July 2026.

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notification message layout Framework notifications carry an indirect message in the shared RX buffer. Validate the reported offset and size before using them, reject zero-length payloads, and ensure that any non-header payload starts at the UUID field rather than in the middle of the message header. Use the validated offset and size values for both kmemdup() and the UUID parsing path so malformed firmware data cannot drive an out-of-bounds read or an oversized allocation.