Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-77234

Improper input validation in FreeRTOS-Kernel timer command handling

Description

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRTOS FreeRTOS-Kernel

Default version status: unaffected

  • 7.0.0 to ≤ 11.3.0affected

References