CVE-2026-77237 — Missing type validation in xQueueAddToSet in FreeRTOS-Kernel
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to r…
Published: 2026-08-21 · CVSS: 8.2 · CVSS 4.0
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7