SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64166

MEDIUM · CVSS 5.5 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's firmware subsystem, specifically related to the arm_ffa driver, which fails to properly check for a NULL FF-A ID table during driver registration. This oversight can lead to potential crashes of the bus if a faulty client driver is registered, impacting system stability. Linux kernel maintainers and developers working with FF-A drivers should prioritize addressing this issue to ensure robust driver registration and prevent system disruptions.

CVE
CVE-2026-64166
Severity
MEDIUM
CVSS
5.5
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration The bus match callback assumes that every FF-A driver provides an id_table and dereferences it unconditionally. Enforce that contract at registration time so a buggy client driver cannot crash the bus during match.

Related CVEs

Other vulnerabilities affecting the same vendor(s)