Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-77237

Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

Description

Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRTOS FreeRTOS-Kernel

Default version status: unaffected

  • 7.4.0 to ≤ 11.3.0affected

References