AWS is issuing an important bulletin regarding FreeRTOS-Kernel, a real-time operating system kernel for microcontrollers. Two vulnerabilities have been identified specifically within the Arm Cortex-R82 MPU port of FreeRTOS-Kernel. The first, CVE-2026-109587, involves incorrect authorization where unprivileged tasks can access privileged kernel memory. This occurs when passing buffer arguments to MPU system calls, bypassing defined memory regions. The second vulnerability, CVE-2026-109588, relates to numeric truncation in buffer authorization checks. On MPU-enabled builds, stream buffer system calls have insufficient buffer length validation. This can allow unprivileged tasks to read or write privileged kernel memory beyond the intended buffer. Both issues affect Arm Cortex-R82 builds where configENABLE_MPU is set to 1. Applications not utilizing the FreeRTOS MPU are not impacted by these vulnerabilities. The affected versions for both CVEs are V11.3.0 and V11.3.1 for the Arm Cortex-R82 MPU port. Users are advised to consult further resources for complete details.