一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月17日

CVE-2026-109588 [HIGH] – Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-

未分类
📑 文章目录

Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window, via a stream buffer system call.

To remediate this issue, users should upgrade to version V11.3.2 or later.