CVE-2026-64520

A flaw was found in the Linux kernel's ARM Firmware Framework for ARM (FFA). The PARTITION_INFO_GET_REGS function, which handles copying partition descriptors, did not adequately validate the indices provided by the firmware. This oversight could allow the system to process inconsistent data, resulting in an out-of-bounds write. Such an issue can lead to memory corruption, potentially causing system instability or a denial of service.

This vulnerability is rated as Moderate impact for Red Hat because exploitation requires access to ARM platforms utilizing the Arm Firmware Framework (FF-A) and depends on malicious or manipulated firmware return values to induce memory corruption. The attack surface is limited to local interactions on specialized architectures that invoke register-based partition enumeration calls. Supported Red Hat Enterprise Linux kernel packages do not incorporate the affected code and are not impacted by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.