Riskcovery

CVE-2026-80524

optee: ffa: Add NULL check in optee_ffa_lend_protmem

State
Published
Severity
Not scored
Published
Aug 26, 2026
Updated
Oct 15, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

optee: ffa: Add NULL check in optee_ffa_lend_protmem

Sashiko (locally) reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer.

Fix that by adding the missing check.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2b78d79cdf963e09ec8b90c55216b6ab5a83dbaf to before 0977a6f23439616701282fc4cb38eca40f36fec6Affected
  • 2b78d79cdf963e09ec8b90c55216b6ab5a83dbaf to before 94bf4fe0e46349c4e73df66dcda073187bc90cc1Affected
  • 2b78d79cdf963e09ec8b90c55216b6ab5a83dbaf to before 650c88738ae8976f46ba71b24dd8aa311adc6fdeAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.