CVE-2026-68400
High
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's `ep_mem_offset` to calculate the start of the endpoint memory access array and to comply with the FF-A spec instead of defaulting to `sizeof(struct ffa_mem_region)`. This requires moving `ffa_mem_region_additional_setup()` earlier in the setup flow. Also, add sanity checks to ensure the calculated descriptor offsets do not exceed `max_fragsize`.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedAug 10, 2026
First seenAug 10, 2026
How to fix
Update
- Linux Linux6e902bea625b710f8bf2f40b4ae4b14fa6a33f13, b39b08e6bee812514b449dc874076890e6b871a0, 8ef18f0ab3c0ec1eac77289f5a542bd96a8a6d66, b4d961351aa84fdf0148783fb1f3a1391b8a0adb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 113580530ee7dc61e668b641d657920734533b9f ≤ v < 6e902bea625b710f8bf2f40b4ae4b14fa6a33f13, 113580530ee7dc61e668b641d657920734533b9f ≤ v < b39b08e6bee812514b449dc874076890e6b871a0, 113580530ee7dc61e668b641d657920734533b9f ≤ v < 8ef18f0ab3c0ec1eac77289f5a542bd96a8a6d66, 113580530ee7dc61e668b641d657920734533b9f ≤ v < b4d961351aa84fdf0148783fb1f3a1391b8a0adb, 6.7 | 6e902bea625b710f8bf2f40b4ae4b14fa6a33f13, b39b08e6bee812514b449dc874076890e6b871a0, 8ef18f0ab3c0ec1eac77289f5a542bd96a8a6d66, b4d961351aa84fdf0148783fb1f3a1391b8a0adb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.