CVE-2026-68400

A flaw was found in the Linux kernel's arm_ffa firmware component. An incorrect calculation of the Endpoint Memory Access Descriptor offset could lead to improper memory access. This issue arises from defaulting to a fixed size instead of using the descriptor's specified offset, potentially causing out-of-bounds memory operations.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local authenticated access on 64-bit ARM hardware running firmware that implements the Arm Firmware Framework for Arm A-profile (FF-A). An improper memory offset calculation during secure partition communication may allow an attacker to trigger out-of-bounds memory access, potentially compromising kernel memory integrity or causing a denial of service. Because this interface depends on specific ARM64 architectural firmware features and is not present in Red Hat Enterprise Linux 8 and 9, typical enterprise environments experience a substantially reduced attack surface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.