FreeRTOS V11.3.x High Severity CVE-2024-100557: Arm Cortex-R82 MPU Region Limit Mask Inversion

Arm Cortex-R82 MPU Region Limit Mask Inversion Vulnerability Summary Vulnerability Overview Vulnerability Name: Arm Cortex-R82 MPU Region Limit Mask Inversion CVE ID: CVE-2024-100557 Severity: High Description: The FreeRTOS Kernel is a real-time operating system kernel designed for microcontrollers and microprocessors. Under certain conditions, the MPU component of the Arm Cortex-R82 architecture fails to correctly enforce memory region boundaries assigned to non-privileged tasks, thereby allowing non-privileged tasks to access memory regions assigned to privileged tasks. Scope of Impact Affected Versions: - Affected versions: V11.3.0, V11.3.1 - Patched versions: V11.3.2 Affected Products: - FreeRTOS-Kernel - FreeRTOS R82 builds constructed using Arm Cortex-R82 (via configR82 MPU) - Applications not utilizing the FreeRTOS MPU are unaffected Remediation Patched Version: V11.3.2 Recommended Actions: - Upgrade to the latest version or ensure a patched derivative version is in use. - If the FreeRTOS MPU is not utilized, no upgrade is necessary. Additional Information Threat Indicators: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High Reference Links: - GitHub Report - Contact Email: sec-privacy@amazon.com Acknowledgments Thanks to Amirhadi and Ada Logic for their cooperation during the coordinated vulnerability disclosure process. --- Note: POC code or exploit code is not included on this page.

Goal Reached Thanks to every supporter — we hit 100%!

FreeRTOS V11.3.x High Severity CVE-2024-100557: Arm Cortex-R82 MPU Region Limit Mask Inversion

More from this source