CVE-2026-68400

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the arm ffa firmware component regarding the calculation of the Endpoint Memory Access Descriptor offset. The system incorrectly defaulted to sizeof(struct ffa mem region) instead of using the descriptor's ep mem offset to determine the start of the endpoint memory access array, which failed to comply with the FF-A (Firmware Framework for ARM) specification. The fix involves relocating the ffa mem region additional setup() function earlier in the setup process and implementing sanity checks to prevent calculated descriptor offsets from exceeding max fragsize.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.