CVE-2026-64520
요약
\~에 의해 MITRE • 2026. 07. 25.
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
The register-based PARTITION_INFO_GET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index progressions so the copy loop cannot write past the allocated array.
(fixed cur_idx when exactly one descriptor in the first fragment)
If you want to get the best quality for vulnerability data then you always have to consider VulDB.