Vulnerability · 1 source · latest 3d

FreeRTOS-Kernel queue-set flaw lets unprivileged tasks trigger privileged out-of-bounds write (CVE-2026-119086)

VULNERABILITYCVE-2026-119086redteam/daily · 1 source

Severity: High
Highest CVSS: 8.2
Exploited: Not known
Sources: 1

What happened

A flaw has been found in FreeRTOS-Kernel, software that runs on small devices such as microcontrollers. In certain setups, a low-privilege program on the device can trick the core system into writing data where it should not, which could undermine the device's protections. Builds that do not use the affected feature, called queue sets, are not affected.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist

General advice for this kind of story

Read the full story at the source

Vulnerabilities

CVE-2026-119086CVSS 8.2Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged m

Full story timeline · 2 updates

Who reported · 1 outlet

AWS Security Bulletins

Who and what is in it

Companies

Amazon AWS