CVE-2026-53278

Analyzed Analyzed - Analysis Complete

Linux Kernel MPAM Configuration Array Null Pointer Dereference

Publication date: 2026-06-26

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocated before destroying it __destroy_component_cfg() is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If __destroy_component_cfg() is called from mpam_disable() before the configuration was ever allocated, then a NULL pointer is dereferenced. Check for this case and return early if the configuration is not allocated. __destroy_component_cfg() also frees the mbwu_state as this is allocated by __allocate_component_cfg(). As the mbwu_state is allocated after comp->cfg is set, and is also under mpam_list_lock, only the first pointer needs checking.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-26

Last Modified

2026-07-08

Generated

2026-07-17

AI Q&A

2026-06-26

EPSS Evaluated

2026-07-15

NVD

CVE-2026-53278

EUVD

EUVD-2026-39883

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's arm_mpam component. The issue occurs because the function __destroy_component_cfg() attempts to free a configuration array without first checking if the array was actually allocated. If __destroy_component_cfg() is called before the configuration array is allocated, it dereferences a NULL pointer, which can cause a crash or undefined behavior.

The fix involves adding a check to ensure the configuration array is allocated before attempting to destroy it, preventing the NULL pointer dereference.

Impact Analysis

If this vulnerability is triggered, it can cause the Linux kernel to dereference a NULL pointer, which typically leads to a kernel crash or system instability. This can result in denial of service or unexpected system behavior.

Hi! I’m here to help you understand CVE-2026-53278. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70