CVE-2026-68345 arm_mpam: guard MBWU state before adding it to garbage
A null pointer dereference in the Linux kernel's arm_mpam driver allows local attackers to cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-68345?
CVE-2026-68345 is a vulnerability in Linux, published on 10 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
arm_mpam: guard MBWU state before adding it to garbage
__destroy_component_cfg() adds each RIS mbwu_state object to the MPAM garbage list when destroying component configuration.
However, mbwu_state is allocated per RIS and only for RISes with MBWU monitors. A component can therefore have comp->cfg allocated while some RISes still have ris->mbwu_state set to NULL.
Passing a NULL mbwu_state to add_to_garbage() dereferences the NULL pointer inside the macro.
Skip RISes that do not have an mbwu_state object before adding them to the garbage list.
Which versions are affected by CVE-2026-68345?
How do I fix CVE-2026-68345?
Apply the vendor's patch.
Is CVE-2026-68345 being exploited?
There is no known exploitation of CVE-2026-68345 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-68345, GHSA-62gj-qm4m-4rg3, UBUNTU-CVE-2026-68345.