CVE-2026-77237
Received Received - Intake

Missing Queue-Set Validation in FreeRTOS-Kernel

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: AMZN

Description
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-77237
EUVD
EUVD-2026-64034

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
freertos freertos_kernel 11.3.1
freertos freertos-kernel From 10.2.0 (inc) to 11.3.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-843 The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves missing type validation in the FreeRTOS-Kernel function xQueueAddToSet() before version 11.3.1. On MPU-enabled ports with configUSE_QUEUE_SETS enabled, an unprivileged task could potentially read privileged kernel memory. The issue arises because the function fails to properly validate the type of queue being added to a set.

Detection Guidance

Detection involves checking FreeRTOS-Kernel version and configuration. Verify if configUSE_QUEUE_SETS is enabled and if the kernel version is below 11.3.1. Use commands like 'grep configUSE_QUEUE_SETS' in kernel config files and 'git log --oneline' to check version history.

Impact Analysis

If exploited, this vulnerability could allow an attacker with access to an unprivileged task to read sensitive kernel memory. This might lead to information disclosure, privilege escalation, or system instability. The impact depends on the specific FreeRTOS deployment and whether configUSE_QUEUE_SETS is enabled.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it pertains to memory safety in FreeRTOS-Kernel. However, if exploited, it could lead to unauthorized memory access, potentially violating data confidentiality principles required by these regulations.

Mitigation Strategies

Upgrade the FreeRTOS-Kernel to version 11.3.1 or later to address the missing queue-set type validation issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77237. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart