In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Check the untrusted offset in FF-A memory share
Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value [U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX] is set from the host kernel.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-realtime-6.17Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-azure-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-virtual-6.17Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.17.0-19-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-generic-6.17Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-6.8Upgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-6.17.0-1009-awsUpgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-awsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-oem-6.17Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-gke-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-6.8 | Mar 17, 2026 | Dec 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub