Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-109588

Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel

Description

Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window, via a stream buffer system call. To remediate this issue, users should upgrade to version V11.3.2 or later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRTOS FreeRTOS-Kernel

Default version status: unaffected

  • 11.3.0 to ≤ 11.3.1affected

References