git.kernel.org
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git CVE-2026-68444
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() ffa_partition_info_get() passes uuid_str directly to uuid_parse() without a NULL check. When a caller passes NULL, uuid_parse() -> __uuid_parse() -> uuid_is_valid() dereferences the pointer, causing a kernel panic: | Unable to handle kernel NULL pointer dereference at virtual address | 0000000000000040 | pc : uuid_parse+0x40/0xac | lr : ffa_partition_info_get+0x1c/0x94 [arm_ffa] Add a NULL guard before uuid_parse() so a NULL argument returns -ENODEV instead of crashing. Callers are expected to always supply a valid partition UUID, so NULL is not a supported input.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
LinuxBrowse Linux / LinuxDefault status: unaffected, affected | CVE List | d0c0bce831223b08e5bade2cefc93c3ddb790796 to < 86f5ea90f73bb7154593bb96f3411e197f3d4fbe | affected |
| d0c0bce831223b08e5bade2cefc93c3ddb790796 to < 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97 | affected | ||
| d0c0bce831223b08e5bade2cefc93c3ddb790796 to < 996c5c19d5b5ac5b98a7b5a406b548305841c301 | affected | ||
| d0c0bce831223b08e5bade2cefc93c3ddb790796 to < 12a42c610e4432e7708cc48d607e5903fffe0aad | affected | ||
| d0c0bce831223b08e5bade2cefc93c3ddb790796 to < 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8 | affected | ||
| 5.14 | affected | ||
| Before 5.14 | unaffected | ||
| 6.6.148 to ≤ 6.6.* | unaffected | ||
| 6.12.101 to ≤ 6.12.* | unaffected | ||
| 6.18.42 to ≤ 6.18.* | unaffected | ||
| 7.1.6 to ≤ 7.1.* | unaffected | ||
| 7.2-rc4 to ≤ * | unaffected | ||
KernelBrowse Linux / Kernel | OSV | 5.14.0 to < 6.6.148 · Fixed in 6.6.148 | affected |
| 6.7.0 to < 6.12.101 · Fixed in 6.12.101 | affected | ||
| 6.13.0 to < 6.18.42 · Fixed in 6.18.42 | affected | ||
| 6.19.0 to < 7.1.6 · Fixed in 7.1.6 | affected |
References
8git.kernel.org
https://git.kernel.org/stable/c/12a42c610e4432e7708cc48d607e5903fffe0aad git.kernel.org
https://git.kernel.org/stable/c/7201e56e52d18abf4cd0a2fee45daf9dc08b5b97 git.kernel.org
https://git.kernel.org/stable/c/86f5ea90f73bb7154593bb96f3411e197f3d4fbe git.kernel.org
https://git.kernel.org/stable/c/8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8 git.kernel.org
https://git.kernel.org/stable/c/996c5c19d5b5ac5b98a7b5a406b548305841c301 github.com
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68444.json nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-68444