NetSight
IP …
medium5.5

CVE-2026-64166

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration The bus match cal…

Impact

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration The bus match callback assumes that every FF-A driver provides an id_table and dereferences it unconditionally. Enforce that contract at registration time so a buggy client driver cannot crash the bus during match.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.14.1 before 5.15.209
from 5.16 before 6.1.175
from 6.2 before 6.6.142
from 6.7 before 6.12.92
from 6.13 before 6.18.34
from 6.19 before 7.0.11

Weakness classification

CWE-476

References