Linux Distros Unpatched Vulnerability : CVE-2026-90270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent wi...

Linux Distros Unpatched Vulnerability : CVE-2026-90271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - armmpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpamdisable has been run in response to an error...

CVE-2026-90271

In the Linux kernel, the following vulnerability has been resolved: armmpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpamdisable has been run in response to an error interrupt then a dereference of a NULL pointer occurs as mpamdisable se...

DEBIAN-CVE-2026-90271

In the Linux kernel, the following vulnerability has been resolved: armmpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpamdisable has been run in response to an error interrupt then a dereference of a NULL pointer occurs as mpamdisable se...

DEBIAN-CVE-2026-90270

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

CVE-2026-90270

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

CVE-2026-90271 arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt

In the Linux kernel, the following vulnerability has been resolved: armmpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpamdisable has been run in response to an error interrupt then a dereference of a NULL pointer occurs as mpamdisable se...

CVE-2026-90271 arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt

In the Linux kernel, the following vulnerability has been resolved: armmpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpamdisable has been run in response to an error interrupt then a dereference of a NULL pointer occurs as mpamdisable se...

EUVD-2026-81864

In the Linux kernel, the following vulnerability has been resolved: armmpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpamdisable has been run in response to an error interrupt then a dereference of a NULL pointer occurs as mpamdisable se...

CVE-2026-90271

This vulnerability affects the Linux kernel's arm_mpam (Memory Partitioning and Monitoring) driver. The root cause is a NULL pointer dereference that occurs when a user unbinds an MSC (Memory System Component) after mpam_disable() has been called in response to an error interrupt, which sets the ...

CVE-2026-90270 arm_mpam: Disable driver unbind to avoid UAF

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

CVE-2026-90270

CVE-2026-90270 affects the arm_mpam driver in the Linux kernel . A use-after-free occurs when a user unbinds the last Memory System Component (MSC) for a given component, causing the corresponding mpam_component to be freed. A subsequent read of the schemata file in the resctrl filesystem then ac...

CVE-2026-90270 arm_mpam: Disable driver unbind to avoid UAF

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

EUVD-2026-81863

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

CVE-2026-90271: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: armmpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user unbinds an MSC after mpamdisable has been run in response to an error interrupt then a dereference of a NULL pointer occurs as mpamdisable se...

CVE-2026-90270: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

Linux Distros Unpatched Vulnerability : CVE-2026-68345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - armmpam: guard MBWU state before adding it to garbage destroycomponentcfg adds each RIS mbwustate object to the MPAM garbage list when destroying component...

SUSE CVE-2026-68345

In the Linux kernel, the following vulnerability has been resolved: armmpam: guard MBWU state before adding it to garbage destroycomponentcfg adds each RIS mbwustate object to the MPAM garbage list when destroying component configuration. However, mbwustate is allocated per RIS and only for RISes...

CVE-2026-68345

A flaw was found in the Linux kernel's armmpam component. When destroying component configuration, the destroycomponentcfg function attempts to add mbwustate objects to a garbage list. However, some Root Interrupt Systems RISes may have a NULL mbwustate object, leading to a null pointer dereferen...

CVE-2026-68345

In the Linux kernel, the following vulnerability has been resolved: armmpam: guard MBWU state before adding it to garbage destroycomponentcfg adds each RIS mbwustate object to the MPAM garbage list when destroying component configuration. However, mbwustate is allocated per RIS and only for RISes...