CVE-2026-68345

A flaw was found in the Linux kernel's arm_mpam component. When destroying component configuration, the __destroy_component_cfg() function attempts to add mbwu_state objects to a garbage list. However, some Root Interrupt Systems (RISes) may have a NULL mbwu_state object, leading to a null pointer dereference when passed to add_to_garbage(). This vulnerability could allow a local attacker to cause a denial of service (DoS).

This issue affects ARM MPAM (Memory Partitioning and Monitoring) on supported platforms. __destroy_component_cfg() may add NULL mbwu_state pointers to the garbage list for RISes without MBWU monitors. Systems without MPAM hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.