Vulnerability · 1 source · latest 3d

FreeRTOS-Kernel queue-set flaw lets unprivileged tasks trigger privileged out-of-bounds write (CVE-2026-119086)

VULNERABILITYCVE-2026-119086redteam/daily · 1 source

Severity: High
Highest CVSS: 8.2
Exploited: Not known
Sources: 1

What happened

CVE-2026-119086 (AWS bulletin 2026-158-AWS) is a missing type validation flaw in xQueueSelectFromSet: the queue-set selection path does not fully verify that the referenced kernel object is a queue set before operating on it. On MPU-enabled ports with configUSEQUEUESETS=1, an unprivileged task can cause an out-of-bounds write during privileged execution, compromising privileged integrity. Affected versions are 7.4.0 through 11.3.2 inclusive. The articles do not state a fixed version or a severity score, so defenders should consult the full AWS bulletin for remediation guidance; builds without queue sets are not affected.

For security analysts · Written by AI from 1 source · Wrong?

What to do

Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist

General advice for this kind of story

Read the full story at the source

Vulnerabilities

CVE-2026-119086CVSS 8.2Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged m

Full story timeline · 2 updates

Who reported · 1 outlet

AWS Security Bulletins

Who and what is in it

Companies

Amazon AWS