CVE-2026-68444

CVE-2026-68444

published August 12, 2026

CVSS
—
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

ffa_partition_info_get() passes uuid_str directly to uuid_parse()

without a NULL check. When a caller passes NULL, uuid_parse() ->

__uuid_parse() -> uuid_is_valid() dereferences the pointer, causing

a kernel panic:

| Unable to handle kernel NULL pointer dereference at virtual address

| 0000000000000040

| pc : uuid_parse+0x40/0xac

| lr : ffa_partition_info_get+0x1c/0x94 [arm_ffa]

Add a NULL guard before uuid_parse() so a NULL argument returns

-ENODEV instead of crashing. Callers are expected to always supply

a valid partition UUID, so NULL is not a supported input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Published
2026-08-12T04:17Z
References (7)
EPSS history
Timeline
  • 12 AUG 00:07Z
    firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
    cvelistv5