CVE-2025-40266

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Check the untrusted offset in FF-A memory share

Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value [U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX] is set from the host kernel.

Red Hat Enterprise Linux is not impacted by this flaw because the vulnerable Arm64 hypervisor memory sharing code is not present in supported kernels. The underlying boundary validation issue in the Arm64 KVM hypervisor FF-A implementation is omitted from Red Hat distributions. Consequently, standard enterprise host systems and virtual machine workloads cannot be exploited.