Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.4

FreeRTOS Kernel may let low‑privilege task access protected memory

CVE-2026-109588 · published 12 days ago
Summary

Versions 11.3.0 and 11.3.1 of the FreeRTOS kernel on certain ARM‑based processors can mistakenly let a task with limited rights read or change memory that should be reserved for the operating system. This happens because the system miscalculates the size of a data buffer during a permission check. Upgrade to version 11.3.2 or later to fix the problem.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
freertos freertos-kernel <= 11.3.1
Original advisory text
Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel
Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window, via a stream buffer system call.



To remediate this issue, users should upgrade to version V11.3.2 or later.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.4 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-197Numeric Truncation Error
CWE-787Out-of-bounds Write
CWE-125Out-of-bounds Read
Timeline
Published16 Oct 2026
Updated26 Oct 2026
First seen16 Oct 2026
Sources
CVE-2026-109588 · NVD
CVE-2026-109588 · MITRE
CVE-2026-109588 · OSV
GHSA-qf4j-6f5j-876g · GHSA
Track software like this
Free during beta