CVE-2026-53278
Received Received - Intake
Linux Kernel MPAM Configuration Array Null Pointer Dereference

Publication date: 2026-06-26

Last updated on: 2026-06-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocated before destroying it __destroy_component_cfg() is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If __destroy_component_cfg() is called from mpam_disable() before the configuration was ever allocated, then a NULL pointer is dereferenced. Check for this case and return early if the configuration is not allocated. __destroy_component_cfg() also frees the mbwu_state as this is allocated by __allocate_component_cfg(). As the mbwu_state is allocated after comp->cfg is set, and is also under mpam_list_lock, only the first pointer needs checking.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-26
Last Modified
2026-06-26
Generated
2026-06-27
AI Q&A
2026-06-26
EPSS Evaluated
N/A
NVD
CVE-2026-53278
EUVD
EUVD-2026-39883
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

If this vulnerability is triggered, it can cause the Linux kernel to dereference a NULL pointer, which typically leads to a kernel crash or system instability. This can result in denial of service or unexpected system behavior.

Executive Summary

This vulnerability exists in the Linux kernel's arm_mpam component. The issue occurs because the function __destroy_component_cfg() attempts to free a configuration array without first checking if the array was actually allocated. If __destroy_component_cfg() is called before the configuration array is allocated, it dereferences a NULL pointer, which can cause a crash or undefined behavior.

The fix involves adding a check to ensure the configuration array is allocated before attempting to destroy it, preventing the NULL pointer dereference.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53278. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart