CVE-2026-68345

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: guard MBWU state before adding it to garbage __destroy_component_cfg() adds each RIS mbwu_state object to the MPAM garbage list when destroying component configuration. However, mbwu_state is allocated per RIS and only for RISes with MBWU monitors. A component can therefore have comp->cfg allocated while some RISes still have ris->mbwu_state set to NULL. Passing a NULL mbwu_state to add_to_garbage() dereferences the NULL pointer inside the macro. Skip RISes that do not have an mbwu_state object before adding them to the garbage list.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/977f52909c624210178a1247fab0b02b110c1106
https://git.kernel.org/stable/c/ca1f96334267ab8d47b2c9d535cdc9920fdde269

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-10 13:20

Updated : 2026-08-17 06:17

NVD link : CVE-2026-68345

Mitre link : CVE-2026-68345

CVE.ORG link : CVE-2026-68345

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-68345", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "41e8a14950e1732af51cfec8fa09f8ded02a5ca9", "lessThan": "ca1f96334267ab8d47b2c9d535cdc9920fdde269", "versionType": "git"}, {"status": "affected", "version": "41e8a14950e1732af51cfec8fa09f8ded02a5ca9", "lessThan": "977f52909c624210178a1247fab0b02b110c1106", "versionType": "git"}], "programFiles": ["drivers/resctrl/mpam_devices.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.19"}, {"status": "unaffected", "version": "0", "lessThan": "6.19", "versionType": "semver"}, {"status": "unaffected", "version": "7.1.6", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/resctrl/mpam_devices.c"], "defaultStatus": "affected"}]}], "published": "2026-08-10T13:20:25.093", "references": [{"url": "https://git.kernel.org/stable/c/977f52909c624210178a1247fab0b02b110c1106", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ca1f96334267ab8d47b2c9d535cdc9920fdde269", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm_mpam: guard MBWU state before adding it to garbage\n\n__destroy_component_cfg() adds each RIS mbwu_state object to the MPAM\ngarbage list when destroying component configuration.\n\nHowever, mbwu_state is allocated per RIS and only for RISes with MBWU\nmonitors. A component can therefore have comp->cfg allocated while some\nRISes still have ris->mbwu_state set to NULL.\n\nPassing a NULL mbwu_state to add_to_garbage() dereferences the NULL\npointer inside the macro.\n\nSkip RISes that do not have an mbwu_state object before adding them to\nthe garbage list."}], "lastModified": "2026-08-17T06:17:42.740", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}