CVE-2026-64166

firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

State: Published
Severity: Not scored
Published: Jul 19, 2026
Updated: Jul 19, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

The bus match callback assumes that every FF-A driver provides an id_table and dereferences it unconditionally. Enforce that contract at registration time so a buggy client driver cannot crash the bus during match.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	92743071464fca5acbbe812d9a0d88de3eaaad36 to before f98f131256beaddd51ad468e95d90d857fef12bfAffected 92743071464fca5acbbe812d9a0d88de3eaaad36 to before bc499d1acddbb75b5b4bce05f5296dd8ef9611fdAffected 92743071464fca5acbbe812d9a0d88de3eaaad36 to before adfff93d08a2e12ecf2a1eba272d18bc749f13c0Affected 92743071464fca5acbbe812d9a0d88de3eaaad36 to before 34f59211984f66788390e7469f3e99d3796db4a8Affected 92743071464fca5acbbe812d9a0d88de3eaaad36 to before 820245d86ce58898fb48b4fefc77d0cafc02801dAffected 92743071464fca5acbbe812d9a0d88de3eaaad36 to before 198f6c86d508ed562f07dc00276cac6dbb5dd3bfAffected 92743071464fca5acbbe812d9a0d88de3eaaad36 to before 0a5e695095c557d2380131b613dea4e8d90371beAffected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.142 through 6.6.Not affected 6.12.92 through 6.12.Not affected 6.18.34 through 6.18.Not affected 7.0.11 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

92743071464fca5acbbe812d9a0d88de3eaaad36 to before f98f131256beaddd51ad468e95d90d857fef12bfAffected
92743071464fca5acbbe812d9a0d88de3eaaad36 to before bc499d1acddbb75b5b4bce05f5296dd8ef9611fdAffected
92743071464fca5acbbe812d9a0d88de3eaaad36 to before adfff93d08a2e12ecf2a1eba272d18bc749f13c0Affected
92743071464fca5acbbe812d9a0d88de3eaaad36 to before 34f59211984f66788390e7469f3e99d3796db4a8Affected
92743071464fca5acbbe812d9a0d88de3eaaad36 to before 820245d86ce58898fb48b4fefc77d0cafc02801dAffected
92743071464fca5acbbe812d9a0d88de3eaaad36 to before 198f6c86d508ed562f07dc00276cac6dbb5dd3bfAffected
92743071464fca5acbbe812d9a0d88de3eaaad36 to before 0a5e695095c557d2380131b613dea4e8d90371beAffected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.142 through 6.6.*Not affected
6.12.92 through 6.12.*Not affected
6.18.34 through 6.18.*Not affected
7.0.11 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.