User-mode Escalation Vulnerability in PECI Drivers from Zephyr Project

CVE-2026-19676

What is CVE-2026-19676?

A vulnerability exists in the PECI drivers of the Zephyr Project due to inadequate checks on caller-supplied buffers. Specifically, the user-mode verifier for the peci_transfer() system call fails to validate internal member pointers of the struct peci_msg. As a result, an attacker with access to the PECI device could manipulate data pointers to arbitrary kernel memory locations, leading to potential exploitation. This could allow for arbitrary reads and writes at the kernel level, which poses significant risks including unauthorized access to sensitive information and the potential for code execution at supervisor privilege. The issue requires specific driver configurations and user-mode access to exploit effectively.

References