CVE-2026-64166

kernel: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · September 10, 2026

Description

A flaw was found in the Linux kernel's ARM FF-A (Firmware Framework for Arm) firmware. This vulnerability occurs during driver registration, where the bus match callback assumes that every FF-A driver provides an ID table and dereferences it unconditionally. A buggy client driver could exploit this to cause a system crash, leading to a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference