Security Advisory

CVE-2026-77237

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-21 17:52:13

Last updated 2026-08-21 20:15:45

Assigner AMZN

CVSS score 8.2

State PUBLISHED

Description

Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.

← Browse all CVEs View on cve.org ↗