Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's `ep_mem_offset` to calculate the start of the endpoint memory access array and to comply with the FF-A spec instead of defaulting to `sizeof(struct ffa_mem_region)`. This requires moving `ffa_mem_region_additional_setup()` earlier in the setup flow. Also, add sanity checks to ensure the calculated descriptor offsets do not exceed `max_fragsize`.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 113580530ee7dc61e668b641d657920734533b9f before 6e902bea625b710f8bf2f40b4ae4b14fa6a33f13; affected 113580530ee7dc61e668b641d657920734533b9f before b39b08e6bee812514b449dc874076890e6b871a0; affected 113580530ee7dc61e668b641d657920734533b9f before 8ef18f0ab3c0ec1eac77289f5a542bd96a8a6d66; affected 113580530ee7dc61e668b641d657920734533b9f before b4d961351aa84fdf0148783fb1f3a1391b8a0adb |
| Linux / Linux | affected 6.7; unaffected 0 before 6.7; unaffected 6.12.114 through 6.12.*; unaffected 6.18.42 through 6.18.*; unaffected 7.1.6 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.