CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved:

arm_mpam: Check whether the config array is allocated before destroying it

__destroycomponentcfg() is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated.

If _destroycomponentcfg() is called from mpamdisable() before the configuration was ever allocated, then a NULL pointer is dereferenced.

Check for this case and return early if the configuration is not allocated.

__destroycomponentcfg() also frees the mbwu_state as this is allocated by _allocatecomponentcfg(). As the mbwustate is allocated after comp->cfg is set, and is also under mpamlistlock, only the first pointer needs checking.