Incorrect Authorization in FreeRTOS-Kernel MPU Port

Executive Summary

This vulnerability is an incorrect authorization issue in the Arm Cortex-R82 MPU port of FreeRTOS-Kernel versions 11.3.0 and 11.3.1. When the MPU feature is enabled, an unprivileged task can bypass memory-region boundaries by passing a buffer argument to an MPU system call. This allows reading and writing privileged kernel memory outside assigned regions, potentially leading to privilege escalation and task isolation compromise.

Useful 0 Not Useful 0

Detection Guidance

Detection requires checking FreeRTOS-Kernel version and MPU configuration. Verify if running V11.3.0 or V11.3.1 on Arm Cortex-R82 with MPU enabled (configENABLE_MPU=1). Check kernel source for MPU region limit mask inversion in system calls handling buffer arguments.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to read or write privileged kernel memory, compromising system confidentiality, integrity, and availability. This may allow unauthorized access to sensitive data, manipulation of kernel operations, or complete system takeover. Only systems using FreeRTOS-Kernel 11.3.0/11.3.1 with MPU enabled on Arm Cortex-R82 are affected.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. It may result in data breaches, unauthorized disclosure, or integrity violations, potentially leading to regulatory penalties, loss of compliance certifications, and reputational damage for organizations handling protected data.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade FreeRTOS-Kernel to version V11.3.2 or later immediately. No workarounds exist; disabling MPU is not a valid mitigation. Ensure all derivative or forked code incorporates the patch.

Useful 0 Not Useful 0