Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-77237 EUVD-2026-64034

Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

Published Aug 21, 2026 · Updated Aug 21, 2026 · Assigned by AMZN

Description

Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.

Affected products

VendorProductAffectedFixed
FreeRTOS FreeRTOS-Kernel 7.4.0 – ≤ 11.3.0 —

References