CVE-2026-23433 — NULL Pointer Dereference in Linux
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 93.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 3
Description
In the Linux kernel, the following vulnerability has been resolved:
arm_mpam: Fix null pointer dereference when restoring bandwidth counters
When an MSC supporting memory bandwidth monitoring is brought offline and
then online, mpam_restore_mbwu_state() calls __ris_msmon_read() via ipi to
restore the configuration of the bandwidth counters. It doesn't care about
the value read, mbwu_arg.val, and doesn't set it leading to a null pointer
dereference when __ris_msmon_read() adds to it. This resul…
Affected Packages2 packages
▶CVEListV5linux/linux41e8a14950e1732af51cfec8fa09f8ded02a5ca9 — ac3e12bc195786d3d44d730b5b2259fd36191848+2
🔴Vulnerability Details
3GHSA▶
GHSA-vqqw-285r-pw6x: In the Linux kernel, the following vulnerability has been resolved:
arm_mpam: Fix null pointer dereference when restoring bandwidth counters
When an↗2026-04-03
OSV▶
CVE-2026-23433: In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix null pointer dereference when restoring bandwidth counters When an M↗2026-04-03