CVE-2026-109587
8.8HighPublished 16 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-863
Impact
An unprivileged task can read and write privileged kernel memory outside its assigned regions. An attacker must already have local code execution as an unprivileged task on an MPU-enabled build.
Root cause
The Arm Cortex-R82 MPU port performs incorrect authorization on buffer arguments supplied to MPU system calls.
Affected systems
FreeRTOS-Kernel V11.3.0 and V11.3.1 (Arm Cortex-R82 / Armv8-R AArch64 MPU port)
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Fix & remediation
Upgrade the FreeRTOS-Kernel to version V11.3.2 or later. No interim mitigation is documented, so recompiling the firmware with the updated kernel is required.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call. To remediate this issue, users should upgrade to version V11.3.2 or later.