CVE-2026-10682

The CVE-2026-10682 entry describes an OOB read and subsequent memory-write in Zephyr’s log_filter_set syscall verifier due to a signed comparison: src_id < (int16_t)log_src_cnt_get(domain_id). Negative src_id values (e.g., -1) pass the check after sign-extension and are used as an unsigned ind...