CVE-2026-77234

Analyzed Analyzed - Analysis Complete

Improper Input Validation in FreeRTOS-Kernel Leading to Privilege Escalation

Publication date: 2026-08-21

Last updated on: 2026-08-27

Assigner: AMZN

Description

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-21

Last Modified

2026-08-27

Generated

2026-09-11

AI Q&A

2026-08-21

EPSS Evaluated

2026-09-09

NVD

CVE-2026-77234

EUVD

EUVD-2026-64012

Affected Vendors & Products

Vendor	Product	Version / Range
amazon	freertos	From 7.0.0 (inc) to 11.3.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper input validation in FreeRTOS-Kernel versions before 11.3.1. An unprivileged task on MPU-enabled ports could exploit this to execute code in the privileged kernel context, potentially gaining full system control.

Detection Guidance

This vulnerability is specific to FreeRTOS-Kernel versions before 11.3.1 and requires checking the kernel version. Use commands like 'grep FREERTOS_KERNEL_VERSION' in your build system or inspect the kernel source for version info. No direct network detection commands are provided in the context.

Impact Analysis

An attacker could exploit this to escalate privileges, execute arbitrary code, or take control of the system. This may lead to data breaches, system crashes, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and access control. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Upgrade FreeRTOS-Kernel to version 11.3.1 or later to address improper input validation that could allow unprivileged tasks to execute privileged kernel code.

Hi! I’m here to help you understand CVE-2026-77234. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70