Missing Queue-Set Type Validation in FreeRTOS-Kernel by AWS

CVE-2026-119086

What is CVE-2026-119086?

The FreeRTOS-Kernel suffers from a missing queue-set type validation in its queue-set selection system call. This vulnerability impacts versions prior to V11.3.3 on MPU-enabled ports with queue sets enabled. It allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object onto the privileged kernel stack. As a result, this can compromise the integrity of privileged memory across the MPU isolation boundary. To mitigate this issue, it is crucial to upgrade to FreeRTOS-Kernel V11.3.3, rebuild the necessary firmware, and reflash the affected systems. Notably, builds that do not enable queue sets remain unaffected.

References