User Mode Verification Flaw in Zephyr RTOS Affects Kernel Device Deinitialization

CVE-2026-19575

What is CVE-2026-19575?

A vulnerability in the user-mode verification handler for the device_deinit() system call within Zephyr RTOS allows an unprivileged user thread to exploit inadequate checks on kernel objects. The flaw arises from improper validations where the expected type of the device object is not adequately verified under certain conditions, leading to potential arbitrary code execution in supervisor mode. This can be exploited by malicious users through crafted memory structures resulting in significant security risks. While affected versions default to enabling vulnerable configurations, subsequent builds require explicit configurations to be at risk.

References