A high-severity memory corruption vulnerability in the Linux kernel arm_ffa driver may allow local attackers to compromise system integrity and availability.

The arm_ffa driver improperly trusts firmware-provided indices when copying partition descriptors into a caller-provided buffer. This is a local vulnerability where an attacker with the ability to interact with the FFA interface could trigger an out-of-bounds memory write.

With a CVSS score of 8.4, this vulnerability poses a significant threat to system security. Exploitation could allow an attacker to escalate privileges or cause a system crash, resulting in unauthorized data access or complete system compromise.

Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or later versions that include the necessary bounds checking for the FFA interface.

Proactive Monitoring: Monitor for kernel-level security events or unusual system behavior that might indicate memory corruption attempts.

Compensating Controls: Ensure that access to the system is restricted to authorized users only, as this vulnerability requires local access to the affected environment.

Public Exploit Available: false

System administrators should apply the latest kernel patches to address this memory corruption flaw. Given the potential for privilege escalation, patching should be treated with high urgency in environments where local users have access to system interfaces.