bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Friday, October 16, 2026

FreeRTOS-Kernel Memory Access Flaws Require Immediate Attention

FreeRTOS-Kernel versions 11.3.0 and 11.3.1 have two critical security issues (CVE-2026-109587 and CVE-2026-109588) affecting Arm Cortex-R82 MPU builds. Unprivileged tasks can bypass memory boundaries and access privileged kernel memory due to incorrect authorization checks and buffer length validation bugs. Action required: update immediately if you're running these versions with configENABLE_MPU=1 enabled. Non-MPU builds are unaffected.

source: [aws/security-bulletin]