CVE-2026-77237
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.
Risk Assessment
An unprivileged task may gain access to kernel memory, potentially leading to system integrity compromise or disclosure of sensitive data.
Recommendation
It is recommended to upgrade FreeRTOS-Kernel to version 11.3.1 or later.
Other vulnerabilities in FreeRTOS-Kernel
See all- CVE-2026-77236High
FreeRTOS-Kernel before version 11.3.1 lacks minimum size validation in secure context allocation, which might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter.
- CVE-2026-77235High
FreeRTOS-Kernel before version 11.3.1 lacks privilege verification in the secure context cleanup handler, which might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation.
- CVE-2026-77234High
FreeRTOS-Kernel before version 11.3.1 has improper input validation, which might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context.
Original NVD description (English source)
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.