CVE-2026-77237: Missing type validation in xQueueAddToSet in FreeRTOS-Kernel
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 11.3.1
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
The issue affects FreeRTOS-Kernel versions before 11.3.1 when running on MPU-enabled ports with configUSE_QUEUE_SETS=1. An unprivileged task must be present for the stated impact to apply.
What access does an attacker need?
An attacker needs the ability to execute or control an unprivileged task on the affected FreeRTOS system. No user interaction is required.
What is the impact of successful exploitation?
Successful exploitation may allow an unprivileged task to read privileged kernel memory. The provided information does not indicate integrity or availability impact.
How can the issue be remediated?
Upgrade FreeRTOS-Kernel to version 11.3.1 or later.