PT-2025-37697

CVE-2023-53256

·

Published

2025-09-15

·

Updated

2026-04-14

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the arm ffa firmware where the device naming scheme for logical partitions fails to uniquely identify multiple services within a physical partition. The current implementation uses only the VM ID in the device name, while both VM ID and UUID are maintained in the partition information. This results in duplicate filenames in the sysfs directory, preventing the registration of multiple logical partitions or services. The kernel logs an error message indicating a naming conflict, specifically referencing /devices/arm-ffa-8001. The fix involves allocating a unique ID using ida alloc() and appending it to "arm-ffa" to create a unique device name, storing the ID value in ffa dev for later release.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾