Freertos Freertos-Kernel vulnerabilities

2 CVEs affecting Freertos Freertos-Kernel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-109588, published 2026-10-16.

More from Freertos.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-109587, published 2026-10-16. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged…
• CVE-2026-109588, published 2026-10-16. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain…