]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
authorUnnathi Chalicheemala <unnathi.chalicheemala@oss.qualcomm.com>
Wed, 17 Jun 2026 23:35:00 +0000 (16:35 -0700)
committerSudeep Holla <sudeep.holla@kernel.org>
Tue, 30 Jun 2026 09:18:24 +0000 (10:18 +0100)
commit8ae5f8e4836667fcaffdf2e3c6068b0a8b364dd8
tree928b1505b58acf61ed26bfafb53e46a91bed70c3
parent53716a4d745f1dac7aff33f3d1494b701eb2f888
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()

ffa_partition_info_get() passes uuid_str directly to uuid_parse()
without a NULL check. When a caller passes NULL, uuid_parse() ->
__uuid_parse() -> uuid_is_valid() dereferences the pointer, causing
a kernel panic:

  |  Unable to handle kernel NULL pointer dereference at virtual address
  |  0000000000000040
  |  pc : uuid_parse+0x40/0xac
  |  lr : ffa_partition_info_get+0x1c/0x94 [arm_ffa]

Add a NULL guard before uuid_parse() so a NULL argument returns
-ENODEV instead of crashing. Callers are expected to always supply
a valid partition UUID, so NULL is not a supported input.

Fixes: d0c0bce83122 ("firmware: arm_ffa: Setup in-kernel users of FFA partitions")
Signed-off-by: Unnathi Chalicheemala <unnathi.chalicheemala@oss.qualcomm.com>
Link: https://patch.msgid.link/20260617-ffa_partition_nullptr_fix-v2-1-bc801b4ce34c@oss.qualcomm.com
Signed-off-by: Sudeep Holla <sudeep.holla@kernel.org>
drivers/firmware/arm_ffa/driver.c