CVE-2026-77237 – Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

​CVE ID :CVE-2026-77237

Published : Aug. 21, 2026, 6:16 p.m. | 28 minutes ago

Description :Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.

Severity: 8.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More