FreeRTOS

FreeRTOS Security Releases - October 2026

freertos-2026-10 Oct 1, 2026 Source: Vendor

FreeRTOS security advisories for October 2026, compiled from CVE.org records.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.cve.org/CVERecord?id=CVE-2026-109587

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

6 lines

Showing 1–6 of 6

CVE-2026-109587 BR2026-0000-034545 FreeRTOS-Kernel unclaimed

Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged k...

Credited as Ada Logics Ltd

CVE-2026-109587 BR2026-0000-034546 FreeRTOS-Kernel unclaimed

Credited as Anthropic

CVE-2026-109588 BR2026-0000-034547 FreeRTOS-Kernel unclaimed

Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain cond...

Credited as Ada Logics Ltd

CVE-2026-109588 BR2026-0000-034548 FreeRTOS-Kernel unclaimed

Credited as Anthropic

CVE-2026-102551 BR2026-0000-034551 FreeRTOS-Plus-TCP unclaimed

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an en...

Credited as Causal Security

CVE-2026-102552 BR2026-0000-034552 FreeRTOS-Plus-TCP unclaimed

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the devic...

Credited as Causal Security