CVE-2026-80524: optee: ffa: Add NULL check in optee_ffa_lend_protmem
In the Linux kernel, the following vulnerability has been resolved:
optee: ffa: Add NULL check in opteeffalendprotmem
Sashiko (locally) reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer.
Fix that by adding the missing check.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1
Event History
Frequently Asked Questions
Under what conditions can this issue be triggered?
The reported condition is a possible NULL pointer dereference when memory allocation fails under memory pressure. Triggering it requires reaching the OP-TEE FF-A protected-memory lending path while the relevant allocation returns NULL.
What is the impact of successful triggering?
The provided information identifies a possible NULL dereference. It does not state any impact beyond that condition.
What should be done if the system cannot be updated immediately?
No workaround is provided. Reducing or avoiding memory-pressure conditions may reduce exposure to the reported allocation-failure path, but the supplied data does not describe a complete mitigation.