CVE-2026-109587

HIGH Status: Received

CVSS Scores

CVSS v3.x Base Score
8.8
HIGH

Description

Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call. To remediate this issue, users should upgrade to version V11.3.2 or later.

Published
October 16, 2026 6:17 PM
Last Modified
October 16, 2026 6:17 PM
Source
ff89ba41-3aa1-4d27-914a-91399e9639e5

Weaknesses (CWE)

CWE-863

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry