Memory Domain Flaw in Zephyr by Zephyr Project

CVE-2026-10635

What is CVE-2026-10635?

A memory domain vulnerability exists in Zephyr v4.4.0, where a dangling pointer in the xtensa_domain_list can lead to a denial of service or memory corruption. Upon de-initializing a memory domain, the link in the global list is not removed, allowing a freed pointer to remain accessible. This flaw can trigger a NULL pointer dereference during memory-mapping operations, leading to potential userspace isolation failure. Only privileged kernel code can exploit this path, making it critical for system security. The vulnerability was introduced with the memory-domain de-initialization feature and has been addressed in later updates.

References