CVE-2026-42546

Name of the Vulnerable Software and Affected Versions OP-TEE versions 3.3.0 through 4.10.x

Description A resource leak exists in the shared memory cleanup logic of OP-TEE, a Trusted Execution Environment designed for Arm Cortex-A cores using TrustZone technology. The function cleanup shm refs() in core/tee/entry std.c fails to apply the OPTEE MSG ATTR TYPE MASK bitmask to parameter attributes. When a normal-world caller provides non-contiguous memory parameters, the system fails to match the attribute type in its internal switch statement and skips the mobj put() call. This leads to a persistent reference leak of mobj reg shm objects. This issue specifically affects non-FF-A configurations supporting non-contiguous, non-secure shared memory. The resulting accumulation of leaks consumes the secure-world heap, which degrades the system's ability to handle trusted application operations and eventually necessitates a reboot.

Recommendations Update to version 4.11.0.