CVE-2026-68444

Source
https://cve.org/CVERecord?id=CVE-2026-68444
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68444.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-68444
Downstream
Published
2026-08-12T00:07:34.609Z
Modified
2026-08-13T04:02:57.519266900Z
Summary
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
Details

In the Linux kernel, the following vulnerability has been resolved:

firmware: armffa: Fix NULL dereference in ffapartitioninfoget()

ffapartitioninfoget() passes uuidstr directly to uuidparse() without a NULL check. When a caller passes NULL, uuidparse() -> _uuidparse() -> uuidisvalid() dereferences the pointer, causing a kernel panic:

| Unable to handle kernel NULL pointer dereference at virtual address | 0000000000000040 | pc : uuidparse+0x40/0xac | lr : ffapartitioninfoget+0x1c/0x94 [arm_ffa]

Add a NULL guard before uuid_parse() so a NULL argument returns -ENODEV instead of crashing. Callers are expected to always supply a valid partition UUID, so NULL is not a supported input.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68444.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d0c0bce831223b08e5bade2cefc93c3ddb790796
Fixed
86f5ea90f73bb7154593bb96f3411e197f3d4fbe
Fixed
7201e56e52d18abf4cd0a2fee45daf9dc08b5b97
Fixed
996c5c19d5b5ac5b98a7b5a406b548305841c301
Fixed
12a42c610e4432e7708cc48d607e5903fffe0aad
Fixed
8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68444.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.14.0
Fixed
6.6.148
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.101
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.42
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68444.json"