CVE-2026-109588
Received Received - Intake

Numeric Truncation in FreeRTOS-Kernel MPU Buffer Authorization

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: AMZN

Description
Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window, via a stream buffer system call. To remediate this issue, users should upgrade to version V11.3.2 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-109588
EUVD
EUVD-2026-102951

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
FreeRTOS FreeRTOS-Kernel 11.3.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-197 Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a buffer authorization check in FreeRTOS-Kernel that fails to correctly validate the full length of a buffer passed by an unprivileged task. This allows the task to access privileged kernel memory beyond the intended buffer window, potentially leading to privilege escalation and bypassing MPU-enforced task isolation on Arm Cortex-R82 MPU ports.

Impact Analysis

An attacker could exploit this to read or write privileged kernel memory, compromising system integrity, confidentiality, and availability. This could allow unprivileged tasks to gain elevated privileges or access sensitive data, especially on systems using FreeRTOS-Kernel V11.3.0 or V11.3.1 with MPU enabled.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Exploitation may result in data breaches, non-compliance with data protection regulations, and potential legal or financial penalties due to compromised system integrity.

Mitigation Strategies

Upgrade FreeRTOS-Kernel to version V11.3.2 or later to patch the vulnerability. Alternatively, disable the MPU feature by setting configENABLE_MPU=0 if upgrading is not immediately possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-109588. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart