CVE-2026-64520: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
In the Linux kernel, the following vulnerability has been resolved:
firmware: armffa: Bound PARTITIONINFOGETREGS copies
The register-based PARTITIONINFOGET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index progressions so the copy loop cannot write past the allocated array.
(fixed curidx when exactly one descriptor in the first fragment)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64520?
CVE-2026-64520 has a risk score of 36, indicating a moderate severity level.
How do I fix CVE-2026-64520?
To fix CVE-2026-64520, update the Linux kernel to the latest version that addresses this vulnerability.
What systems are affected by CVE-2026-64520?
CVE-2026-64520 affects systems running the vulnerable versions of the Linux kernel that utilize the arm_ffa firmware.
What are the consequences of not addressing CVE-2026-64520?
Failing to address CVE-2026-64520 may lead to potential unauthorized access to partition descriptors and associated data.
When was CVE-2026-64520 published?
CVE-2026-64520 was published on July 25, 2026.