CVE-2026-77234: Improper input validation in FreeRTOS-Kernel timer command handling
Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context.
To remediate this issue, users should upgrade to version 11.3.1 or later
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FreeRTOS-Kernelto a version that resolves this vulnerability.Fixed in 11.3.1
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
The issue affects FreeRTOS-Kernel versions before 11.3.1 on MPU-enabled ports. Exploitation requires the ability to run an unprivileged task on the affected system.
What level of access does an attacker need?
An attacker needs local, low-privilege execution as an unprivileged task. No user interaction is required according to the reported vector.
What is the potential impact of successful exploitation?
A successful exploit may let an unprivileged task execute code in privileged kernel context. This can result in high impact to confidentiality, integrity, and availability.
How should affected deployments be remediated?
Upgrade FreeRTOS-Kernel to version 11.3.1 or later.