CVE-2026-68444
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() ffa_partition_info_get() passes uuid_str directly to uuid_parse() without a NULL check. When a caller passes NULL, uuid_parse() -> __uuid_parse() -> uuid_is_valid() dereferences the pointer, causing a kernel panic: | Unable to handle kernel NULL pointer dereference at virtual address | 0000000000000040 | pc : uuid_parse+0x40/0xac | lr : ffa_partition_info_get+0x1c/0x94 [arm_ffa] Add a NULL guard before uuid_parse() so a NULL argument returns -ENODEV instead of crashing. Callers are expected to always supply a valid partition UUID, so NULL is not a supported input.
How to fix
- Linux Linux7dfb020e3048411fbca91e9ad6174da9a2d3e2b3, ddf85f0c32e05baafbd9c3a44859858db90eec48, 86f5ea90f73bb7154593bb96f3411e197f3d4fbe, 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97, 996c5c19d5b5ac5b98a7b5a406b548305841c301, 12a42c610e4432e7708cc48d607e5903fffe0aad, 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d0c0bce831223b08e5bade2cefc93c3ddb790796 ≤ v < 7dfb020e3048411fbca91e9ad6174da9a2d3e2b3, d0c0bce831223b08e5bade2cefc93c3ddb790796 ≤ v < ddf85f0c32e05baafbd9c3a44859858db90eec48, d0c0bce831223b08e5bade2cefc93c3ddb790796 ≤ v < 86f5ea90f73bb7154593bb96f3411e197f3d4fbe, d0c0bce831223b08e5bade2cefc93c3ddb790796 ≤ v < 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97, d0c0bce831223b08e5bade2cefc93c3ddb790796 ≤ v < 996c5c19d5b5ac5b98a7b5a406b548305841c301, d0c0bce831223b08e5bade2cefc93c3ddb790796 ≤ v < 12a42c610e4432e7708cc48d607e5903fffe0aad, d0c0bce831223b08e5bade2cefc93c3ddb790796 ≤ v < 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8, 5.14 | 7dfb020e3048411fbca91e9ad6174da9a2d3e2b3, ddf85f0c32e05baafbd9c3a44859858db90eec48, 86f5ea90f73bb7154593bb96f3411e197f3d4fbe, 7201e56e52d18abf4cd0a2fee45daf9dc08b5b97, 996c5c19d5b5ac5b98a7b5a406b548305841c301, 12a42c610e4432e7708cc48d607e5903fffe0aad, 8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.