The flaw arises from a lack of validation for framework notification messages in the ARM FFA subsystem of the Linux kernel. Malformed firmware data can be processed without checking the reported offset and size, allowing a kernel read beyond the bounds of the supplied buffer or an oversized allocation when domain‑appropriate functions such as kmemdup() or UUID parsing are used. The consequence is kernel‑space memory corruption or a system crash, leading to a denial of service. The impact is confined to kernel memory and does not directly affect user‑space data but can destabilize the host system.

All Linux kernel builds that include the arm_ffa framework and have not yet integrated the upstream patch are potentially affected. The CVE data does not list specific version numbers, so any kernel containing the vulnerable code before the applied fix could be impacted.

The CVSS score of 8.4 denotes high severity, while the EPSS score of less than 1 % indicates a very low current probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is the delivery of a malformed firmware notification via the arm_ffa interface, which requires an attacker to influence firmware data presented to the system. Successful exploitation could lead to a kernel crash or denial of service but does not provide direct privilege escalation or data exfiltration.