Missing Privilege Verification in FreeRTOS-Kernel Affects Secure Context Handling

CVE-2026-77235

What is CVE-2026-77235?

The FreeRTOS-Kernel prior to version 11.3.1 contains a missing privilege verification in the secure context cleanup handler. This vulnerability may allow local users to exploit the system, resulting in a use-after-free condition within secure-world memory via the SVC handler responsible for secure context deallocation. To mitigate this risk, users should promptly upgrade to version 11.3.1 or later to ensure secure handling of context cleanup.

References