CVE-2026-77235

Name of the Vulnerable Software and Affected Versions FreeRTOS-Kernel versions prior to 11.3.1

Description A missing privilege verification in the secure context cleanup handler allows local users to trigger a use-after-free condition in secure-world memory. This occurs through the SVC handler used for secure context deallocation. A use-after-free is a scenario where a program continues to use a pointer after it has been freed, which can lead to crashes or unauthorized memory access.

Recommendations Upgrade to version 11.3.1 or later.