CVE-2026-77235
Received Received - Intake

Privilege Escalation in FreeRTOS-Kernel via Context Cleanup

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: AMZN

Description
Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.1 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-77235
EUVD
EUVD-2026-64013

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
freertos freertos_kernel 11.3.1
freertos freertos_kernel From 10.2.0 (inc) to 11.3.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves missing privilege verification in the secure context cleanup handler of FreeRTOS-Kernel versions before 11.3.1. It affects ARM TrustZone (ARMv8-M) configurations where an unprivileged Non-Secure task can free a task's secure context while it is still in use, leading to a use-after-free condition in secure-world memory.

Detection Guidance

Detecting this vulnerability requires checking the FreeRTOS-Kernel version and ARM TrustZone configuration. Verify if your system uses ARMv8-M with TrustZone enabled and if the FreeRTOS-Kernel version is between 10.2.0 and 11.3.0. Commands may include checking the kernel version via build logs or runtime inspection.

Impact Analysis

The vulnerability can cause crashes or undefined behavior in systems using ARM TrustZone secure contexts. This may lead to denial-of-service conditions, data corruption, or potential privilege escalation if exploited by a local attacker with access to the system.

Compliance Impact

This vulnerability primarily affects systems using ARM TrustZone in FreeRTOS-Kernel versions 10.2.0 to 11.3.0. It may lead to use-after-free conditions in secure-world memory, potentially causing crashes or undefined behavior. While not directly tied to GDPR or HIPAA, such memory corruption risks could impact data integrity and availability, which are key compliance requirements under these regulations.

Mitigation Strategies

Upgrade FreeRTOS-Kernel to version 11.3.1 or later. This addresses the missing privilege verification in secure context cleanup. There is no complete workaround short of upgrading for affected configurations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77235. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart