CVE-2022-2993: Zephyrproject Zephyr

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

There is an error in the condition of the last if-statement in the function smp_check_keys. It was rejecting current keys if all requirements were unmet.

Affected products

• Zephyrproject Zephyr: up to and including 3.1.0

Published 2022-12-09. Last modified 2026-06-17.