PT-2026-79426

CVE-2026-77237

Published

2026-08-21

Updated

2026-08-21

Description by

CVSS 3.1

8.4

High

MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeRTOS-Kernel versions prior to 11.3.1

Description Missing queue-set type validation in the xQueueAddToSet() function may allow an unprivileged task to read privileged kernel memory. This issue occurs on MPU-enabled ports when configUSE QUEUE SETS is set to 1. MPU (Memory Protection Unit) is a hardware component that monitors memory access to prevent unauthorized access to specific memory regions.

Recommendations Upgrade to version 11.3.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Nvidia

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')