« Volver al listado

CVE-2026-68345

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

arm_mpam: guard MBWU state before adding it to garbage

__destroy_component_cfg() adds each RIS mbwu_state object to the MPAM garbage list when destroying component configuration.

However, mbwu_state is allocated per RIS and only for RISes with MBWU monitors. A component can therefore have comp->cfg allocated while some RISes still have ris->mbwu_state set to NULL.

Passing a NULL mbwu_state to add_to_garbage() dereferences the NULL pointer inside the macro.

Skip RISes that do not have an mbwu_state object before adding them to the garbage list.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-68345",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "41e8a14950e1732af51cfec8fa09f8ded02a5ca9",
              "lessThan": "ca1f96334267ab8d47b2c9d535cdc9920fdde269",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "41e8a14950e1732af51cfec8fa09f8ded02a5ca9",
              "lessThan": "977f52909c624210178a1247fab0b02b110c1106",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/resctrl/mpam_devices.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.19"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "6.19",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/resctrl/mpam_devices.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-08-10T13:20:25.093",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/977f52909c624210178a1247fab0b02b110c1106",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ca1f96334267ab8d47b2c9d535cdc9920fdde269",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm_mpam: guard MBWU state before adding it to garbage\n\n__destroy_component_cfg() adds each RIS mbwu_state object to the MPAM\ngarbage list when destroying component configuration.\n\nHowever, mbwu_state is allocated per RIS and only for RISes with MBWU\nmonitors. A component can therefore have comp->cfg allocated while some\nRISes still have ris->mbwu_state set to NULL.\n\nPassing a NULL mbwu_state to add_to_garbage() dereferences the NULL\npointer inside the macro.\n\nSkip RISes that do not have an mbwu_state object before adding them to\nthe garbage list."
    }
  ],
  "lastModified": "2026-08-17T06:17:42.740",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}