Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value [U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX] is set from the host kernel.

INFO

Published Date :

2025-12-04T16:08:25.392Z

Last Modified :

2025-12-20T08:51:50.089Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-40266 vulnerability.

Vendors Products
Linux
  • Linux Kernel

CVSS Vulnerability Scoring System