Threats tagged 'ghsa-hvgp-9g43-gqqw'

CVE-2026-68401 is a high-severity vulnerability in the Linux kernel's arm_ffa firmware component. It involves multiple out-of-bound write issues in the ffa_setup_and_transmit() function, specifically when handling FFA versions prior to 1.2. The flaw arises because the code writes beyond the bounds of the ep_mem_access->reserved field due to incorrect size assumptions. This has been fixed by properly zeroing the structure based on the FFA version and ensuring sufficient size for writing constituents.