CVE-2026-68400

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-68400
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68400.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-68400
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
openSUSE (1)
SUSE (4)
UBUNTU (1)
Related
openSUSE (1)
SUSE (4)
Published
2026-08-10T12:04:19Z
Modified
2026-10-24T02:30:38Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation
Details

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation

Use the descriptor's ep_mem_offset to calculate the start of the endpoint memory access array and to comply with the FF-A spec instead of defaulting to sizeof(struct ffa_mem_region). This requires moving ffa_mem_region_additional_setup() earlier in the setup flow. Also, add sanity checks to ensure the calculated descriptor offsets do not exceed max_fragsize.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68400.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
113580530ee7dc61e668b641d657920734533b9f
Fixed
6e902bea625b710f8bf2f40b4ae4b14fa6a33f13
Fixed
b39b08e6bee812514b449dc874076890e6b871a0
Fixed
8ef18f0ab3c0ec1eac77289f5a542bd96a8a6d66
Fixed
b4d961351aa84fdf0148783fb1f3a1391b8a0adb

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68400.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.42
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68400.json"