PT-2026-64741 · Linux · Linux

CVE-2026-64520 · Published 2026-07-25 · Updated 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm ffa: Bound PARTITION INFO GET REGS copies

The register-based PARTITION INFO GET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index progressions so the copy loop cannot write past the allocated array.

(fixed cur idx when exactly one descriptor in the first fragment)

Related Identifiers

CVE-2026-64520

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-64520 · Security Note
• https://git.kernel.org/stable/c/3974ea1938406f9bfa7c1f48d4e43533f447bb08 · Note
• https://git.kernel.org/stable/c/79d95c02ae0a95e6e80e8e92b7ca74ecee02854f · Note
• https://git.kernel.org/stable/c/f39bc7ebe75e2186b417a024a7f7e2fd4cc7eb95 · Note