CVE-2026-68444

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

ffa_partition_info_get() passes uuid_str directly to uuid_parse() without a NULL check. When a caller passes NULL, uuid_parse() -> __uuid_parse() -> uuid_is_valid() dereferences the pointer, causing a kernel panic:

| Unable to handle kernel NULL pointer dereference at virtual address | 0000000000000040 | pc : uuid_parse+0x40/0xac | lr : ffa_partition_info_get+0x1c/0x94 [arm_ffa]

Add a NULL guard before uuid_parse() so a NULL argument returns -ENODEV instead of crashing. Callers are expected to always supply a valid partition UUID, so NULL is not a supported input.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d0c0bce831223b08e5bade2cefc93c3ddb790796, < 7dfb020e3048411fbca91e9ad6174da9a2d3e2b3; >= d0c0bce831223b08e5bade2cefc93c3ddb790796, < ddf85f0c32e05baafbd9c3a44859858db90eec48; >= d0c0bce831223b08e5bade2cefc93c3ddb790796, < 86f5ea90f73bb7154593bb96f3411e197f3d4fbe; >= d0c0bce831223b08e5bade2cefc93c3ddb790796, < 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97; >= d0c0bce831223b08e5bade2cefc93c3ddb790796, < 996c5c19d5b5ac5b98a7b5a406b548305841c301; >= d0c0bce831223b08e5bade2cefc93c3ddb790796, < 12a42c610e4432e7708cc48d607e5903fffe0aad; >= d0c0bce831223b08e5bade2cefc93c3ddb790796, < 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8
LinuxLinux5.14

References

Timeline

Published
Aug 12, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-684457.8In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4_gem_objCVE-2026-684467.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comesCVE-2026-684477.1In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRICVE-2026-68448In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range source with src mounter creds ComCVE-2026-68449In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanniCVE-2026-68455.0A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of SerCVE-2026-68450In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert __add_reloc_roCVE-2026-684517.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2CVE-2026-684527.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipheCVE-2026-684537.1In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validationCVE-2026-684548.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest sCVE-2026-68455In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sess
CVE-2026-68444: Unscored | Vulnix