PT-2026-64741 · Linux · Linux

CVE-2026-64520 · Publicado 2026-07-25 · Atualizado 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm ffa: Bound PARTITION INFO GET REGS copies

The register-based PARTITION INFO GET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index progressions so the copy loop cannot write past the allocated array.

(fixed cur idx when exactly one descriptor in the first fragment)

Identificadores relacionados

CVE-2026-64520

Produtos afetados

Linux

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-64520 · Nota de Segurança
• https://git.kernel.org/stable/c/3974ea1938406f9bfa7c1f48d4e43533f447bb08 · Nota
• https://git.kernel.org/stable/c/79d95c02ae0a95e6e80e8e92b7ca74ecee02854f · Nota
• https://git.kernel.org/stable/c/f39bc7ebe75e2186b417a024a7f7e2fd4cc7eb95 · Nota