CVE-2026-68401

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the arm ffa firmware component where the ffa setup and transmit() function performs out-of-bound writes. This occurs because writing to ep mem access->reserved can exceed the allocated memory for FFA versions prior to 1.2, as the ffa emad size get() function returns 16 bytes while the reserved field has an offset of 24. Additionally, the function may not ensure sufficient size when writing constituents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.