High severity8.8NVD Advisory· Published Oct 16, 2026
CVE-2026-109587
CVE-2026-109587
Description
Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call.
To remediate this issue, users should upgrade to version V11.3.2 or later.
Affected products
1- Range: V11.3.0, V11.3.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.