CVE-2026-80524: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in optee_ffa_lend_protmem Sashiko (locally) reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check.

Affected products

• Linux Linux: from 6.18, before 7.1.10 (fixed in 7.1.10)

Published 2026-08-26. Last modified 2026-08-26.