CVE-2026-77234— Improper input validation in FreeRTOS-Kernel timer command handling
Quick assessment
Affected
FreeRTOS FreeRTOS-Kernel
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 FreeRTOS-Kernel 11.3.1 版本之前，存在不适当的输入验证问题，可能导致在未启用 MPU（内存保护单元）的端口上，非特权任务能够以特权内核上下文执行代码。 要解决此问题，用户应升级到 11.3.1 或更高版本。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| FreeRTOS | FreeRTOS-Kernel | 7.0.0≤ 11.3.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-77234
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper input validation in FreeRTOS-Kernel timer command handling
Source: CVE Program / CVE List V5
Vulnerability Description
Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| FreeRTOS | FreeRTOS-Kernel | 7.0.0 ~ 11.3.0 | - |
|
II. Public POCs for CVE-2026-77234
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 9048 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-77234
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-77234 (2)
Vendor Pages for CVE-2026-77234 (1)
Same Patch Batch · FreeRTOS · 2026-08-21 · 4 CVEs total
| CVE-2026-77236 | 7.3 HIGH | Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel |
| CVE-2026-77235 | 7.3 HIGH | Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel |
| CVE-2026-77237 | 6.5 MEDIUM | Missing type validation in xQueueAddToSet in FreeRTOS-Kernel |
IV. Related Vulnerabilities
Same product: FreeRTOS-Kernel
-
CVE-2026-77237
Missing type validation in xQueueAddToSet in FreeRTOS-Kernel -
CVE-2026-77236
Missing size validation in SecureContext_AllocateContext in -
CVE-2026-77235
Missing privilege check in SecureContext_FreeContext in Free -
CVE-2024-28115
Privilege Escalation in FreeRTOS Kernel ARMv7-M MPU ports an
Same vendor: FreeRTOS
-
CVE-2026-77237
Missing type validation in xQueueAddToSet in FreeRTOS-Kernel -
CVE-2026-77236
Missing size validation in SecureContext_AllocateContext in -
CVE-2026-77235
Missing privilege check in SecureContext_FreeContext in Free -
CVE-2026-8686
DoS from MQTT v5.0 Deserialization Fault in core MQTT -
CVE-2024-38373
FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser
Same weakness: CWE-863
-
CVE-2026-62382
PasswordPusher before v2.9.6 Authentication Bypass via Null -
CVE-2026-60083
SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file -
CVE-2026-4245
Post Duplicator <= 3.0.11 - Authorization Bypass to Authenti -
CVE-2026-62941
Incus: Cross-project instance copy bypasses target project r -
CVE-2026-62313
Incus: Project restriction `restricted.containers.privilege=
V. Comments for CVE-2026-77234
No comments yet