Improper Input Validation in FreeRTOS Kernel Affects AWS IoT Solutions
CVE-2026-77234

9.3CRITICAL

Key Information:

Vendor

Freertos

Status
Freertos-kernel
Vendor
CVE Published:
21 August 2026

What is CVE-2026-77234?

An improper input validation vulnerability in the FreeRTOS Kernel allows unprivileged tasks on MPU-enabled ports to execute code within the privileged kernel context. This can lead to escalation of privileges and potential disruption of system operations. Users of FreeRTOS Kernel prior to version 11.3.1 are strongly advised to upgrade to the latest version to mitigate this risk and protect their IoT solutions.

Affected Version(s)

FreeRTOS-Kernel 7.0.0 <= 11.3.0

References

https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/...
patch
https://aws.amazon.com/security/security-bulletins/2026-0...
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NVIDIA
.