CVE-2026-64520
High
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-based PARTITION_INFO_GET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index progressions so the copy loop cannot write past the allocated array. (fixed cur_idx when exactly one descriptor in the first fragment)
SeverityHigh
CVSS8.4
Exploit probability—
Product
Linux
PublishedJul 25, 2026
First seenJul 25, 2026
How to fix
Update
- Linux Linuxf39bc7ebe75e2186b417a024a7f7e2fd4cc7eb95, 79d95c02ae0a95e6e80e8e92b7ca74ecee02854f, 3974ea1938406f9bfa7c1f48d4e43533f447bb08 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | ba85c644ac8dc37d9b01a3332c2f142cb4d46954 ≤ v < f39bc7ebe75e2186b417a024a7f7e2fd4cc7eb95, ba85c644ac8dc37d9b01a3332c2f142cb4d46954 ≤ v < 79d95c02ae0a95e6e80e8e92b7ca74ecee02854f, ba85c644ac8dc37d9b01a3332c2f142cb4d46954 ≤ v < 3974ea1938406f9bfa7c1f48d4e43533f447bb08, 6.12 | f39bc7ebe75e2186b417a024a7f7e2fd4cc7eb95, 79d95c02ae0a95e6e80e8e92b7ca74ecee02854f, 3974ea1938406f9bfa7c1f48d4e43533f447bb08 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.