Findings

CVE-2026-77234

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context.

Published Aug 21, 2026 · updated Oct 14, 2026 · amazon freertos

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 21, 2026 · NIST NVD

    Detected

    Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

Affected

  • cpe amazon/freertosversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-77234

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-77234

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2026-77234

    Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.

    nvd.nist.gov

References