Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-109587

Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel

Description

Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call. To remediate this issue, users should upgrade to version V11.3.2 or later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRTOS FreeRTOS-Kernel

Default version status: unaffected

  • 11.3.0 to ≤ 11.3.1affected

References