Threats Tagged 'cve-2026-53278'

A vulnerability in the Linux kernel's arm_mpam component involves a NULL pointer dereference due to missing checks before freeing a configuration array. The function __destroy_component_cfg() may be called before the configuration array is allocated, leading to a NULL pointer dereference and causing a denial of service. The issue arises when mpam_disable() triggers __destroy_component_cfg() without verifying allocation status. The vulnerability has been resolved by adding a check to ensure the configuration array is allocated before attempting to free it.

A vulnerability in the Linux kernel's ARM MPAM driver was fixed by adding a check to ensure the configuration array is allocated before attempting to destroy it. Without this check, a NULL pointer dereference could occur if the destruction function is called before allocation. This issue was resolved in Linux kernel versions 7.0.0 and later. The vulnerability has a medium severity score and does not impact confidentiality or integrity but can cause denial of service due to an application crash. A patch is available and included in multiple updated Linux kernel packages for Ubuntu 26.04 LTS and OEM releases.