CVE-2026-77237

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

EUVD-2026-64034

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237

FreeRTOS-Kernel before version 11.3.1 contains a missing queue-set type validation in the xQueueAddToSet() function. On MPU-enabled ports with configUSE_QUEUE_SETS=1 , an unprivileged task can exploit this to read privileged kernel memory , crossing the memory protection boundary. The CVSS 3.1 sc...

PT-2026-79426

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE QUEUE SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

Linux kernel Watch Queue Set Size Buffer Overflow DoS

The vulnerability of the watchqueuesetsize function in the kernel/watchqueue.c module of the Linux operating system is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: idpf: fix memory leaks and crashes while performing a soft reset

In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leaks and crashes while performing a soft reset The second tagged commit introduced a UAF, as it removed restoring qvector-vport pointers after reinitializating the structures. This is due to that all queue...

SUSE CVE-2024-44964

In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leaks and crashes while performing a soft reset The second tagged commit introduced a UAF, as it removed restoring qvector-vport pointers after reinitializating the structures. This is due to that all queue...

PT-2024-6911

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.0-rc2+ Description The vulnerability is related to the netif queue set napi function in the Linux kernel, which can lead to out-of-bounds writes when XDP queues are included. This issue arises because netif...

PT-2025-8185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue in the watch queue set size function can occur when the error cleanup code attempts to free buffer pages that were not allocated. This can lead to a null pointer...

PT-2022-7461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the watch queue set filter function in the Linux kernel, where a couple of places check that the filter type value does not exceed what the type filter...