Freertos Kernel
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Freertos Kernel.
By the Year
In 2026 there have been 7 vulnerabilities in Freertos Kernel with an average score of 7.7 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 7 | 7.71 |
It may take a day or so for new Freertos Kernel vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Freertos Kernel Security Vulnerabilities
FreeRTOS-Kernel <11.3.3 Queue-Set Stack Overflow PrivEsc
CVE-2026-119086
6.5 - Medium
- October 30, 2026
Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged memory across the MPU isolation boundary. To remediate this issue, users should upgrade to FreeRTOS-Kernel V11.3.3, rebuild, and reflash affected firmware. Builds that do not enable queue sets are not affected.
Object Type Confusion
FreeRTOS-Kernel <11.3.2 Numeric Truncation in MPU Buffer Check Allows PrivEsc
CVE-2026-109588
8.8 - High
- October 16, 2026
Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window, via a stream buffer system call. To remediate this issue, users should upgrade to version V11.3.2 or later.
Numeric Truncation Error
FreeRTOS-Kernel MPU auth bypass (preV11.3.2)
CVE-2026-109587
8.8 - High
- October 16, 2026
Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call. To remediate this issue, users should upgrade to version V11.3.2 or later.
AuthZ
FreeRTOS-Kernel <11.3.1 QueueSet Access Validation Bug Unlocks Privileged Memory
CVE-2026-77237
6.5 - Medium
- August 21, 2026
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.
Object Type Confusion
FreeRTOSKernel 11.3.0: Heap Metadata OOB via Undersized Stack
CVE-2026-77236
7.3 - High
- August 21, 2026
Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later.
Memory Corruption
UAF via Missing Priv Verif in Secure Context Clean FreeRTOS-Kernel <11.3.1
CVE-2026-77235
7.3 - High
- August 21, 2026
Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.1 or later.
Dangling pointer
FreeRTOS Kernel <11.3.1 Improper Input Validation Enables Privileged Execution
CVE-2026-77234
8.8 - High
- August 21, 2026
Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.
AuthZ
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Freertos Kernel or by Freertos? Click the Watch button to subscribe.
