CVE-2026-109588

Name of the Vulnerable Software and Affected Versions FreeRTOS-Kernel versions 11.3.0 through 11.3.1

Description Numeric truncation of the buffer length occurs during the MPU buffer authorization check on the Arm Cortex-R82 (Armv8-R AArch64) MPU port. This issue may allow an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window through a stream buffer system call.

Recommendations Upgrade to version 11.3.2 or later.