FreeRTOS-Kernel Memory Access Flaws Require Immediate Attention
FreeRTOS-Kernel versions 11.3.0 and 11.3.1 have two critical security issues (CVE-2026-109587 and CVE-2026-109588) affecting Arm Cortex-R82 MPU builds. Unprivileged tasks can bypass memory boundaries and access privileged kernel memory due to incorrect authorization checks and buffer length validation bugs. Action required: update immediately if you're running these versions with configENABLE_MPU=1 enabled. Non-MPU builds are unaffected.
source: [aws/security-bulletin]