CVE-2026-68444

firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

State: Published
Severity: Not scored
Published: Aug 12, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

ffa_partition_info_get() passes uuid_str directly to uuid_parse() without a NULL check. When a caller passes NULL, uuid_parse() -> __uuid_parse() -> uuid_is_valid() dereferences the pointer, causing a kernel panic:

| Unable to handle kernel NULL pointer dereference at virtual address | 0000000000000040 | pc : uuid_parse+0x40/0xac | lr : ffa_partition_info_get+0x1c/0x94 [arm_ffa]

Add a NULL guard before uuid_parse() so a NULL argument returns -ENODEV instead of crashing. Callers are expected to always supply a valid partition UUID, so NULL is not a supported input.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 7dfb020e3048411fbca91e9ad6174da9a2d3e2b3Affected d0c0bce831223b08e5bade2cefc93c3ddb790796 to before ddf85f0c32e05baafbd9c3a44859858db90eec48Affected d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 86f5ea90f73bb7154593bb96f3411e197f3d4fbeAffected d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97Affected d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 996c5c19d5b5ac5b98a7b5a406b548305841c301Affected d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 12a42c610e4432e7708cc48d607e5903fffe0aadAffected d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 7dfb020e3048411fbca91e9ad6174da9a2d3e2b3Affected
d0c0bce831223b08e5bade2cefc93c3ddb790796 to before ddf85f0c32e05baafbd9c3a44859858db90eec48Affected
d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 86f5ea90f73bb7154593bb96f3411e197f3d4fbeAffected
d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97Affected
d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 996c5c19d5b5ac5b98a7b5a406b548305841c301Affected
d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 12a42c610e4432e7708cc48d607e5903fffe0aadAffected
d0c0bce831223b08e5bade2cefc93c3ddb790796 to before 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.