UAF via Missing Priv Verif in Secure Context Clean FreeRTOS-Kernel <11.3.1
CVE-2026-77235 Published on August 21, 2026
Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel
Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.1 or later.
Vulnerability Analysis
CVE-2026-77235 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and a high impact on availability.
Weakness Type
What is a Dangling pointer Vulnerability?
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
CVE-2026-77235 has been classified to as a Dangling pointer vulnerability or weakness.
Products Associated with CVE-2026-77235
Want to know whenever a new CVE is published for Freertos Kernel? stack.watch will email you.
Affected Versions
FreeRTOS-Kernel:- Version 10.2.0, <= 11.3.0 is affected.