CVE-2026-23433

A flaw was found in the Linux kernel's arm_mpam component. A local user with privileges to manage hardware components could trigger a null pointer dereference when a Memory System Controller (MSC) supporting memory bandwidth monitoring is brought offline and then online. This vulnerability, occurring in the __ris_msmon_read() function, causes a kernel oops, leading to a system crash and a Denial of Service (DoS).