CVE-2026-68444

A flaw was found in the Linux kernel's arm_ffa firmware component. A local attacker or malicious process could exploit this vulnerability by providing a NULL argument to the ffa_partition_info_get() function. This missing NULL check leads to a NULL pointer dereference, causing a kernel panic and resulting in a Denial of Service (DoS) for the affected system.

This issue affects ARM systems using FF-A (Firmware Framework for Arm). ffa_partition_info_get() passes a NULL uuid_str to uuid_parse() without validation, causing kernel panic. Callers must pass valid UUID strings; systems without FF-A are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.