CVE-2026-64166 — firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

Back Back to CVE browser

MEDIUM

firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

Published Jul 19, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.16%

Description

The bus match callback assumes that every FF-A driver provides an id_table and dereferences it unconditionally. Enforce that contract at registration time so a buggy client driver cannot crash the bus during match.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.14
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.14
- Version
  5.15.209
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  6.1.175
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.12.92
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.18.34
  Status
  unaffected
  Constraints
  <=6.18.*
- Version
  6.6.142
  Status
  unaffected
  Constraints
  <=6.6.*
- Version
  7.0.11
  Status
  unaffected
  Constraints
  <=7.0.*
- Version
  7.1
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.14	affected	-
0	unaffected	<5.14
5.15.209	unaffected	<=5.15.*
6.1.175	unaffected	<=6.1.*
6.12.92	unaffected	<=6.12.*
6.18.34	unaffected	<=6.18.*
6.6.142	unaffected	<=6.6.*
7.0.11	unaffected	<=7.0.*
7.1	unaffected	<=*

Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.16% 0.00162

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00162

Score over time

Jul–Oct 2026

EPSS v5

Percentile over time

EPSS v5

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.16% (0.00162)	4.89th	v5 (v2026.06.15)
Jul 20, 2026	0.17% (0.00168)	6.48th	v5 (v2026.06.15)

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (12)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-64166		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2502560		Issue Tracking
https://git.kernel.org/stable/c/0a5e695095c557d2380131b613dea4e8d90371be		Patch
https://git.kernel.org/stable/c/198f6c86d508ed562f07dc00276cac6dbb5dd3bf		Patch
https://git.kernel.org/stable/c/34f59211984f66788390e7469f3e99d3796db4a8		Patch
https://git.kernel.org/stable/c/820245d86ce58898fb48b4fefc77d0cafc02801d		Patch
https://git.kernel.org/stable/c/adfff93d08a2e12ecf2a1eba272d18bc749f13c0		Patch
https://git.kernel.org/stable/c/bc499d1acddbb75b5b4bce05f5296dd8ef9611fd		Patch
https://git.kernel.org/stable/c/f98f131256beaddd51ad468e95d90d857fef12bf		Patch
https://lore.kernel.org/linux-cve-announce/2026071935-CVE-2026-64166-98a5@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64166
https://www.cve.org/CVERecord?id=CVE-2026-64166