CVE-2026-68400 firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation
An integer overflow in the Linux kernel's ARM FF-A driver allows attackers to bypass memory access checks, potentially leading to code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-68400?
CVE-2026-68400 is a high-severity vulnerability in Linux, published on 10 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation
Use the descriptor's `ep_mem_offset` to calculate the start of the endpoint memory access array and to comply with the FF-A spec instead of defaulting to `sizeof(struct ffa_mem_region)`. This requires moving `ffa_mem_region_additional_setup()` earlier in the setup flow. Also, add sanity checks to ensure the calculated descriptor offsets do not exceed `max_fragsize`.
Which versions are affected by CVE-2026-68400?
How do I fix CVE-2026-68400?
Apply the vendor's patch.
Is CVE-2026-68400 being exploited?
There is no known exploitation of CVE-2026-68400 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-68400, DEBIAN-CVE-2026-68400, GHSA-9fc3-h9fc-q4xw, UBUNTU-CVE-2026-68400.