CVE-2026-109587: Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel
Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call.
To remediate this issue, users should upgrade to version V11.3.2 or later.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FreeRTOS-Kernelto a version that resolves this vulnerability.Fixed in V11.3.2
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects FreeRTOS-Kernel V11.3.0 and V11.3.1 when using the Arm Cortex-R82 Armv8-R AArch64 MPU port with MPU-enabled builds. Systems not using that MPU port or not built with MPU support are not identified as affected.
What access does an attacker need to exploit this?
An attacker needs the ability to run an unprivileged task. Exploitation occurs through a buffer argument passed to an MPU system call, allowing the task to access privileged kernel memory outside its assigned regions.
What is the impact if exploitation succeeds?
An unprivileged task may be able to read and write privileged kernel memory. The reported severity vector indicates high confidentiality, integrity, and availability impact, with scope changed.
What should teams do if they are running an affected build?
Upgrade FreeRTOS-Kernel to V11.3.2 or later. The provided information does not specify an alternative mitigation for systems that cannot immediately upgrade.