FreeRTOS Kernel <11.3.1 Improper Input Validation Enables Privileged Execution
CVE-2026-77234 Published on August 21, 2026

Improper input validation in FreeRTOS-Kernel timer command handling
Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-77234 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is an AuthZ Vulnerability?

The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

CVE-2026-77234 has been classified to as an AuthZ vulnerability or weakness.


Products Associated with CVE-2026-77234

stack.watch emails you whenever new vulnerabilities are published in Freertos Kernel or Amazon Aws. Just hit a watch button to start following.

Freertos Kernel
 
Amazon Aws
 

Affected Versions

FreeRTOS-Kernel: