Linux: arm_ffa NULL dereference in ffa_partition_info_get
CVE-2026-68444 Published on August 12, 2026
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
ffa_partition_info_get() passes uuid_str directly to uuid_parse()
without a NULL check. When a caller passes NULL, uuid_parse() ->
__uuid_parse() -> uuid_is_valid() dereferences the pointer, causing
a kernel panic:
| Unable to handle kernel NULL pointer dereference at virtual address
| 0000000000000040
| pc : uuid_parse+0x40/0xac
| lr : ffa_partition_info_get+0x1c/0x94 [arm_ffa]
Add a NULL guard before uuid_parse() so a NULL argument returns
-ENODEV instead of crashing. Callers are expected to always supply
a valid partition UUID, so NULL is not a supported input.
Products Associated with CVE-2026-68444
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version d0c0bce831223b08e5bade2cefc93c3ddb790796 and below 86f5ea90f73bb7154593bb96f3411e197f3d4fbe is affected.
- Version d0c0bce831223b08e5bade2cefc93c3ddb790796 and below 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97 is affected.
- Version d0c0bce831223b08e5bade2cefc93c3ddb790796 and below 996c5c19d5b5ac5b98a7b5a406b548305841c301 is affected.
- Version d0c0bce831223b08e5bade2cefc93c3ddb790796 and below 12a42c610e4432e7708cc48d607e5903fffe0aad is affected.
- Version d0c0bce831223b08e5bade2cefc93c3ddb790796 and below 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8 is affected.
- Version 5.14 is affected.
- Before 5.14 is unaffected.
- Version 6.6.148, <= 6.6.* is unaffected.
- Version 6.12.101, <= 6.12.* is unaffected.
- Version 6.18.42, <= 6.18.* is unaffected.
- Version 7.1.6, <= 7.1.* is unaffected.
- Version 7.2-rc4, <= * is unaffected.